PCSE Ensuring data protection

Your startup is building on Google Cloud and needs to rotate encryption keys automatically.

Multiple choice — select one answer

Answer choices

  1. a. Cloud KMS automatic rotation
  2. b. Secret Manager
  3. c. Email keys (not recommended for production workloads)
  4. d. Keys in git

Architectural breakdown & explanation

Rotation limits key compromise window.

Correct answer(s): a. Cloud KMS automatic rotation

Exam domain: Ensuring data protection (25% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the Google Professional Cloud Security Engineer bank. Run a full timed practice exam with domain-weighted random questions in your browser.