A Customer Wants to Move Their Sensitive Workloads to a Compute

A customer wants to move their sensitive workloads to a Compute Engine-based cluster using Managed Instance Groups (MIGs) . The jobs are bursty and must be completed quickly. They have a requirement to be able to manage and rotate the encryption keys. Which boot disk encryption solution should you use on the cluster to meet this customer's requirements?

A) Customer-supplied encryption keys (CSEK)
B) Customer-managed encryption keys (CMEK) using Cloud Key Management Service (KMS)
C) Encryption by default
D) Pre-encrypting files before transferring to Google Cloud Platform (GCP) for analysis

Correct Answer:

Verified

Unlock this answer now
Get Access to more Verified Answers free of charge

Access For Free