Courseiva
← PCSE
Full test
Ensuring Data Protection →easyMultiple ChoiceObjective-mapped

PCSE Ensuring Data Protection Practice Question

A security engineer needs to automatically rotate a database password stored in Secret Manager every 60 days. Which approach meets this requirement with minimal operational overhead?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Set the rotation period in Secret Manager to 60 days and configure a Pub/Sub topic to trigger a Cloud Function that generates a new password

Secret Manager supports automatic rotation with a specified rotation period and Pub/Sub notifications. A Cloud Function can listen for the notification and generate a new password, updating the secret version.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    Set the secret's `next_rotation_time` to 60 days from now; no further action needed

    Why it's wrong here

    Setting the rotation time alone does not rotate; you need a rotation function.

  • ✗

    Enable automatic rotation with a 60-day period in Cloud KMS, which will automatically update the secret

    Why it's wrong here

    Cloud KMS manages encryption keys, not secrets.

  • ✗

    Use a cron job on Compute Engine to update the secret every 60 days

    Why it's wrong here

    Operational overhead is higher, and it's not serverless.

  • ✓

    Set the rotation period in Secret Manager to 60 days and configure a Pub/Sub topic to trigger a Cloud Function that generates a new password

    Why this is correct

    This automates rotation with low overhead.

About these practice questions

Courseiva writes every PCSE question from scratch — 960 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This PCSE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCSE exam.