PCSE Ensuring data protection

What is the recommended Google Cloud solution to rotate encryption keys automatically (variant 1)?

Multiple choice — select one answer

Answer choices

  1. a. Secret Manager
  2. b. Cloud KMS automatic rotation
  3. c. Email keys (not recommended for production workloads)
  4. d. Cloud KMS

Architectural breakdown & explanation

Rotation limits key compromise window.

Correct answer(s): b. Cloud KMS automatic rotation

Exam domain: Ensuring data protection (25% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the Google Professional Cloud Security Engineer bank. Run a full timed practice exam with domain-weighted random questions in your browser.