PCSE Ensuring data protection

A platform team must rotate encryption keys automatically. Which option aligns with Google best practices?

Multiple choice — select one answer

Answer choices

  1. a. Cloud KMS automatic rotation
  2. b. Secret Manager
  3. c. Email keys (not recommended for production workloads)
  4. d. Keys in git

Architectural breakdown & explanation

Rotation limits key compromise window.

Correct answer(s): a. Cloud KMS automatic rotation

Exam domain: Ensuring data protection (25% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the Google Professional Cloud Security Engineer bank. Run a full timed practice exam with domain-weighted random questions in your browser.