An insurance company is migrating archives to Cloud Storage and wants assurance that the files remain protected both while stored and when replicated between Google data centers. Which statement accurately reflects Google Cloud's default encryption behavior for these two data states?
Data is stored unencrypted by default, but Google offers customer-managed keys to encrypt copies sent across regions.
Data is encrypted at rest by default, but the customer must set up Cloud VPN tunnels if they want encryption between Google sites.
Data is encrypted at rest automatically, and Google also encrypts the network traffic between its data centers without customer configuration.
Data is encrypted only if the customer enables customer-supplied keys, and inter-data-center traffic relies solely on private fiber links.
Google Cloud automatically encrypts all customer data before it is written to physical media, using AES-256 or similar ciphers. The platform also encrypts data in transit by default, including traffic moving between Google data centers, through TLS and application-layer encryption on internal RPCs. Because both protections are enabled by default, customers do not need to configure keys or network tunnels to achieve encryption at rest or in transit. The other choices are incorrect because they either claim data is stored unencrypted, require customer-managed keys for basic protection, or place responsibility on the customer to create VPNs for inter-data-center traffic.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is AES-256 encryption?
Open an interactive chat with Bash
How does Google Cloud secure data in transit?
Open an interactive chat with Bash
What is the difference between customer-managed keys and Google's default encryption?
Open an interactive chat with Bash
What is AES-256 and why is it used in encryption?
Open an interactive chat with Bash
What is TLS and how does it secure data in transit?
Open an interactive chat with Bash
What are internal RPCs and their role in data security?
Open an interactive chat with Bash
GCP Cloud Digital Leader
Trust and Security with Google Cloud
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .