PCSE Ensuring data protection

Which Google Cloud service should you use to rotate encryption keys automatically?

Multiple choice — select one answer

Answer choices

  1. a. Secret Manager
  2. b. Keys in git
  3. c. Cloud KMS automatic rotation
  4. d. Email keys (not recommended for production workloads)

Architectural breakdown & explanation

Rotation limits key compromise window.

Correct answer(s): c. Cloud KMS automatic rotation

Exam domain: Ensuring data protection (25% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the Google Professional Cloud Security Engineer bank. Run a full timed practice exam with domain-weighted random questions in your browser.