Which statement correctly describes Cloud External Key Manager?

AExternal key material is cached in Google Cloud after first use for performance

BExternal key material never leaves the external key manager and Google communicates with the EKM for each request

CCloud EKM is only for signing, not encryption

DCloud EKM replaces IAM for data access control

Related Questions

Which service is designed to store and manage secret values such as passwords and API keys, rather t...

easy

Why would a team use Secret Manager versions and aliases for an application secret?...

easy

Which Google Cloud service is built to inspect, classify, and de-identify sensitive data such as PII...

easy

A regulated workload requires secret payloads to be stored only in a customer-selected set of region...

medium

A secret uses user-managed replication in several regions. One configured region is unavailable duri...

medium

View all Ensuring data protection questions

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.