Your privacy team uses crypto-shredding (deleting encryption keys) as a strategy to delete personally identifiable...

Vendor: Google
Product: Professional-Cloud-Security-Engineer
Update on: Dec 27, 2025
Questions: 297

Google Professional-Cloud-Security-Engineer Question Answer

Your privacy team uses crypto-shredding (deleting encryption keys) as a strategy to delete personally identifiable information (PII). You need to implement this practice on Google Cloud while still utilizing the majority of the platform’s services and minimizing operational overhead. What should you do?

Use client-side encryption before sending data to Google Cloud, and delete encryption keys on-premises

Use Cloud External Key Manager to delete specific encryption keys.

Use customer-managed encryption keys to delete specific encryption keys.

Use Google default encryption to delete specific encryption keys.