Google Professional Cloud Security Engineer Question 356
Select 3Google Cloud PlatformYour organization handles sensitive financial data and wants to ensure that this data remains encrypted not only at rest and in transit but also during processing. You are asked to configure a virtual machine (VM) in Google Cloud to meet this requirement using Confidential Computing. Which of the following steps should you take to enable Confidential Computing for your workload?
- A
Use a Confidential VM image when creating the VM instance.
- B
Enable the Confidential Computing feature in the VM instance settings.
- C
Attach a Shielded VM to ensure the data is encrypted during processing.
- D
Ensure the VM is deployed in a region that supports Confidential Computing.
- E
Install additional encryption software inside the VM to enable Confidential Computing.
Show answer and explanation
Correct answers: A, B, D
Explanation
Confidential Computing in Google Cloud allows workloads to remain encrypted during processing, providing an additional layer of security for sensitive data. To enable this feature, you must use a Confidential VM image, enable the Confidential Computing feature in the VM settings, and ensure that the VM is deployed in a region that supports Confidential Computing. Shielded VMs and additional encryption software are not necessary for enabling Confidential Computing, as it is a distinct feature implemented at the hardware level.
- A. Correct.
This is correct. To use Confidential Computing, you must create the VM using a Confidential VM image, as it is specifically designed to run workloads in an encrypted state during processing.
- B. Correct.
This is correct. When creating or configuring a VM, you must explicitly enable the Confidential Computing feature to take advantage of its capabilities.
- C. Incorrect.
This is incorrect. Shielded VMs provide protection against rootkits and boot-level attacks but do not enable encryption during data processing.
- D. Correct.
This is correct. Confidential Computing is only available in certain Google Cloud regions, so you must ensure the VM is deployed in a supported region.
- E. Incorrect.
This is incorrect. Confidential Computing is a built-in feature of Confidential VMs and does not require additional encryption software to be installed.