Cloud KMS for key management in GCP - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to create a new key ring in Cloud KMS.

GCP

gcloud kms keyrings create [1] --location=us-central1

Drag options to blanks, or click blank then click option'

Amy-keyring

Bcreate-keyring

Ckeyring-create

Dnew-keyring

Attempts:

3 left

💡 Hint

Common Mistakes

Using command-like names instead of a simple key ring name.

Omitting the location parameter.

The command gcloud kms keyrings create my-keyring --location=us-central1 creates a key ring named my-keyring in the specified location.

2fill in blank

medium

Complete the code to create a new symmetric encryption key in the key ring.

GCP

gcloud kms keys create [1] --location=us-central1 --keyring=my-keyring --purpose=encryption

Drag options to blanks, or click blank then click option'

Amy-symmetric-key

Bsymmetric-create

Ckey-encrypt

Dencrypt-key

Attempts:

3 left

💡 Hint

Common Mistakes

Using verbs or commands as key names.

Not specifying the purpose correctly.

The command creates a symmetric encryption key named my-symmetric-key in the my-keyring key ring.

3fill in blank

hard

Fix the error in the command to encrypt data using the key.

GCP

echo 'Hello World' | gcloud kms encrypt --location=us-central1 --keyring=my-keyring --key=[1] --plaintext-file=- --ciphertext-file=encrypted.txt

Drag options to blanks, or click blank then click option'

Amy-keyring

Bencrypt-key

Cmy-symmetric-key

Dus-central1

Attempts:

3 left

💡 Hint

Common Mistakes

Using the key ring name instead of the key name.

Using the location instead of the key name.

The --key flag requires the name of the key, which is my-symmetric-key. Using other values causes errors.

4fill in blank

hard

Fill both blanks to decrypt the ciphertext file and output the plaintext.

GCP

gcloud kms decrypt --location=us-central1 --keyring=[1] --key=[2] --ciphertext-file=encrypted.txt --plaintext-file=decrypted.txt

Drag options to blanks, or click blank then click option'

Amy-keyring

Bmy-symmetric-key

Cencrypt-key

Ddecrypt-key

Attempts:

3 left

💡 Hint

Common Mistakes

Swapping key ring and key names.

Using incorrect key names.

The command uses the key ring my-keyring and the key my-symmetric-key to decrypt the file.

5fill in blank

hard

Fill all three blanks to list all keys in a key ring with their purpose.

GCP

gcloud kms keys list --location=[1] --keyring=[2] --format='table(name, [3])'

Drag options to blanks, or click blank then click option'

Aus-central1

Bmy-keyring

Cpurpose

DcreationTime

Attempts:

3 left

💡 Hint

Common Mistakes

Using wrong location or key ring names.

Choosing a wrong field in the format option.

This command lists all keys in the my-keyring key ring located in us-central1, showing their names and purposes.