PCSE Ensuring data protection

An audit found gaps: the organization must rotate encryption keys automatically. Which option addresses this?

Multiple choice — select one answer

Answer choices

  1. a. Email keys (not recommended for production workloads)
  2. b. Keys in git
  3. c. Secret Manager
  4. d. Cloud KMS automatic rotation

Architectural breakdown & explanation

Rotation limits key compromise window.

Correct answer(s): d. Cloud KMS automatic rotation

Exam domain: Ensuring data protection (25% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the Google Professional Cloud Security Engineer bank. Run a full timed practice exam with domain-weighted random questions in your browser.