A customer needs an alternative to storing their plain text secrets in their source-code management (SCM) system. How should the customer achieve this using Google Cloud Platform?
A) Use Cloud Source Repositories, and store secrets in Cloud SQL.
B) Encrypt the secrets with a Customer-Managed Encryption Key (CMEK), and store them in Cloud Storage.
C) Run the Cloud Data Loss Prevention API to scan the secrets, and store them in Cloud SQL.
D) Deploy the SCM to a Compute Engine VM with local SSDs, and enable preemptible VMs.

Question

Quizplus · Accepted Answer

Encrypting secrets with a Customer-Managed Encryption Key (CMEK) and storing them in Cloud Storage provides a secure and manageable way to handle sensitive information outside of the source-code management system.

A Customer Needs an Alternative to Storing Their Plain Text