You need to store database passwords and API keys for your Cloud Run application. Which TWO statements correctly describe why Secret Manager is preferred over Cloud KMS for this use case? (Select TWO)

Answer options:

Secret Manager stores the actual payload (the password), while KMS only manages encryption keys.

Secret Manager supports versioning of secrets natively.

Secret Manager is free, while KMS is expensive.

Cloud KMS cannot be accessed by Cloud Run.

Secret Manager automatically rotates passwords in the database.

How to approach this question

Differentiate Secret Manager and KMS.

Full Answer

Secret Manager is designed to store and version small payloads like passwords and API keys. Cloud KMS is designed to manage cryptographic keys used to encrypt data stored in other services.

Common mistakes

Thinking KMS stores the passwords.

Question 42 All questions Question 44

Practice the full GCP Professional Cloud Architect Practice Exam 2

50 questions · hints · full answers · grading

More questions from this exam

Q01CASE STUDY: TechStream Gaming. 500 emp, $100M rev. On-prem US/EU, 200 servers, MySQL 5TB. 2M peak...Medium Q02CASE STUDY: TechStream Gaming. 500 emp, $100M rev. On-prem US/EU, 200 servers, MySQL 5TB. 2M peak...Medium Q03CASE STUDY: TechStream Gaming. 500 emp, $100M rev. On-prem US/EU, 200 servers, MySQL 5TB. 2M peak...Hard Q04CASE STUDY: TechStream Gaming. 500 emp, $100M rev. On-prem US/EU, 200 servers, MySQL 5TB. 2M peak...Medium Q05CASE STUDY: TechStream Gaming. 500 emp, $100M rev. On-prem US/EU, 200 servers, MySQL 5TB. 2M peak...Easy

View all 50 questions →