Google Professional Cloud Security Engineer Question 352
Select 2Google Cloud PlatformYour organization processes sensitive data and wants to ensure that workloads running in Google Cloud maintain confidentiality even when processed in use. To achieve this, you have been tasked with enabling Confidential Computing in Google Cloud. Which of the following steps are necessary to successfully enable and use Confidential Computing for a Compute Engine VM?
- A
Enable the Confidential VM service in the Google Cloud Console.
- B
Ensure the VM is created using a machine type that supports Confidential Computing.
- C
Enable Shielded VM features to use Confidential Computing.
- D
Select the 'Confidential VM' option when creating a new Compute Engine VM.
- E
Install a custom encryption key management system to secure the VM.
Show answer and explanation
Correct answers: B, D
Explanation
To enable and use Confidential Computing in Google Cloud, you must ensure that the VM is created using a machine type that supports Confidential Computing (such as AMD EPYC processors) and select the 'Confidential VM' option during the VM creation process. Other steps like enabling Shielded VM or installing custom key management systems are not required for Confidential Computing specifically.
- A. Incorrect.
Enabling Confidential VM service is not a separate step in the Google Cloud Console. The feature is integrated into the VM creation process when selecting 'Confidential VM'.
- B. Correct.
Confidential Computing requires the use of specific machine types that support Confidential Computing, such as those based on AMD EPYC processors with Secure Encrypted Virtualization (SEV) technology.
- C. Incorrect.
While Shielded VM features provide additional security measures, they are not directly required to enable Confidential Computing.
- D. Correct.
To use Confidential Computing, you must explicitly select the 'Confidential VM' option when creating a new VM in Compute Engine.
- E. Incorrect.
Installing a custom encryption key management system is not required to enable Confidential Computing. Google Cloud manages the encryption for Confidential VMs transparently.