Google Professional Cloud Security Engineer Question 354
Select 2Google Cloud PlatformYour organization processes sensitive data in Google Cloud, and you are tasked with implementing a solution to ensure that data remains encrypted not just at rest or in transit, but also during processing. You decide to use Confidential Computing. Which of the following steps are required to enable Confidential Computing for a Compute Engine VM?
- A
Select a Confidential VM machine family when creating the VM instance.
- B
Enable the 'Confidential Computing' checkbox during the creation of the VM instance.
- C
Use an N2D machine type with AMD EPYC processors.
- D
Install a dedicated encryption key manager on the VM to enable data encryption during processing.
- E
Configure Identity and Access Management (IAM) roles for accessing Confidential Computing features.
Show answer and explanation
Correct answers: B, C
Explanation
To enable Confidential Computing for a Compute Engine VM, you must select an eligible machine type (such as N2D) that supports AMD EPYC processors and enable the 'Confidential Computing' checkbox during VM creation. These steps ensure that the VM is configured to encrypt data during processing using secure hardware features. Additional configurations like a dedicated key manager or specific IAM roles are not required for enabling Confidential Computing.
- A. Incorrect.
This option is incorrect because there is no specific 'Confidential VM machine family.' Instead, Confidential Computing is supported on certain machine types like N2D.
- B. Correct.
This option is correct because enabling the 'Confidential Computing' checkbox during VM creation is a required step to activate Confidential Computing.
- C. Correct.
This option is correct because Confidential Computing in Google Cloud relies on AMD EPYC processors, which are available in the N2D machine types.
- D. Incorrect.
This option is incorrect because Confidential Computing automatically encrypts data during processing using hardware features and does not require a dedicated encryption key manager on the VM.
- E. Incorrect.
This option is incorrect because configuring IAM roles is not specifically required to enable Confidential Computing. IAM roles may be used to manage permissions, but they are not directly related to enabling Confidential VMs.