Cloud KMS for key management in GCP - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is Cloud KMS in Google Cloud Platform?

Cloud KMS (Key Management Service) is a service that lets you create, manage, and use cryptographic keys to protect your data in Google Cloud.

beginner

What is a key ring in Cloud KMS?

A key ring is a container that holds cryptographic keys. It helps organize keys by project and location.

intermediate

What is the difference between a symmetric key and an asymmetric key in Cloud KMS?

A symmetric key uses the same key for encryption and decryption. An asymmetric key uses a pair of keys: one public to encrypt and one private to decrypt.

intermediate

How does Cloud KMS help with security compliance?

Cloud KMS provides centralized key management, audit logs, and integrates with IAM to control who can use or manage keys, helping meet security and compliance requirements.

beginner

What is the purpose of key rotation in Cloud KMS?

Key rotation means changing cryptographic keys regularly to reduce the risk of key compromise and improve security.

What does Cloud KMS primarily manage?

A Cryptographic keys

B Virtual machines

C Network firewalls

D Storage buckets

Cloud KMS manages cryptographic keys used to encrypt and decrypt data.

Which of the following is a container for keys in Cloud KMS?

A Key ring

B Key vault

C Key folder

D Key bucket

A key ring is the container that holds keys in Cloud KMS.

What type of key uses a public and private pair?

A Secret key

B Symmetric key

C Asymmetric key

D Static key

Asymmetric keys use a public key for encryption and a private key for decryption.

Why is key rotation important?

A To increase key size

B To delete old keys

C To speed up encryption

D To reduce risk of key compromise

Key rotation reduces the risk of keys being compromised by changing them regularly.

Which Google Cloud service controls who can use or manage keys in Cloud KMS?

A Cloud Storage

B Cloud IAM

C Cloud Functions

D Cloud Pub/Sub

Cloud IAM manages permissions and access control for Cloud KMS keys.

Explain how Cloud KMS helps protect data in Google Cloud.

Think about how keys keep data safe and who can use them.

Describe the difference between symmetric and asymmetric keys in Cloud KMS.

Consider how keys are used to lock and unlock data.