Exam Cloud Digital Leader topic 1 question 227 discussion

B. When it is at rest and in transit. Google Cloud automatically encrypts data both at rest (when it's stored) and in transit (when it's being transferred between systems or services). This is done by default for all data in Google Cloud, ensuring data security and privacy without requiring additional configuration from the user. At rest: Data stored in Google Cloud (e.g., in Google Cloud Storage, databases, or other storage services) is automatically encrypted using encryption keys managed by Google, unless users choose to manage their own keys (via Customer-Managed Encryption Keys, or CMEK). In transit: Data transferred between services, users, and other components in Google Cloud is automatically encrypted using TLS (Transport Layer Security) to protect data during transfer.

B: Automatic Encryption in Google Cloud: Google Cloud automatically encrypts data both when it is at rest and in transit. This means that: At Rest: Data stored on disk in Google Cloud services, including but not limited to Google Cloud Storage, Compute Engine, and BigQuery, is encrypted before it is written to disk and decrypted when accessed. In Transit: Data moving between user devices and Google data centers, as well as data moving within Google's network between data centers, is encrypted. This encryption protects data as it travels over the internet, ensuring that sensitive information is securely transmitted.