Google Cloud Professional Cloud Architect — Question 2

You need to upload files from your on-premises environment to Cloud Storage. You want the files to be encrypted on Cloud Storage using customer-supplied encryption keys. What should you do?

Answer options

• A. Supply the encryption key in a .boto configuration file. Use gsutil to upload the files.
• B. Supply the encryption key using gcloud config. Use gsutil to upload the files to that bucket.
• C. Use gsutil to upload the files, and use the flag --encryption-key to supply the encryption key.
• D. Use gsutil to create a bucket, and use the flag --encryption-key to supply the encryption key. Use gsutil to upload the files to that bucket.

Correct answer: A

Explanation

The correct answer is A because supplying the encryption key in a .boto configuration file allows gsutil to use it automatically during the upload process. Options B, C, and D are incorrect as they either misplace the encryption key provision or suggest unnecessary steps that deviate from the requirement of using a .boto file.