A telemetry infrastructure team is designing the provisioning of a high-throughput time-series database on Google Cloud to ingest real-time IoT metrics. Additionally, they must migrate 3 petabytes of historical baseline metrics from their on-premises data center within a strict 14-day window. The company's on-premises internet link is limited to an unreserved 1 Gbps connection. Regulatory compliance mandates that all stored data at rest must be encrypted using keys managed in Cloud KMS with automated monthly rotation, while preventing team overhead associated with storing raw key material. Which combination of services and provisioning strategies meets all throughput, migration timeline, and compliance requirements?
- Provision Cloud Bigtable configured with Customer-Managed Encryption Keys (CMEK) referencing Cloud KMS for real-time ingestion, and request Google Cloud Transfer Appliance to perform the offline migration of the 3 PB dataset into Cloud Storage.Cevap
- BProvision Cloud Spanner across a multi-region configuration using Customer-Supplied Encryption Keys (CSEK) for real-time ingestion, and deploy Storage Transfer Service over the existing 1 Gbps link to stream the 3 PB historical dataset.
- CProvision Cloud Bigtable with default Google-managed encryption keys, and set up Storage Transfer Service agents on local servers to upload the 3 PB historical dataset over the internet while maintaining Terraform state files locally without object locking.
- DProvision Cloud Bigtable configured with Customer-Supplied Encryption Keys (CSEK), and order Google Cloud Transfer Appliance to import the 3 PB offline dataset while maintaining infrastructure provisioning scripts in local unversioned files.
Cevap
Provision Cloud Bigtable configured with Customer-Managed Encryption Keys (CMEK) referencing Cloud KMS for real-time ingestion, and request Google Cloud Transfer Appliance to perform the offline migration of the 3 PB dataset into Cloud Storage.
The correct strategy combines Cloud Bigtable for high-throughput time-series telemetry ingestion, Google Cloud Transfer Appliance for migrating 3 PB of data offline within 14 days, and CMEK via Cloud KMS to comply with encryption and automated rotation policies without raw key management overhead.
Adım Adım Çözüm
Anahtar Kavram
Provisioning scalable storage and database resources using physical transfer mechanisms for petabyte-scale data and CMEK via Cloud KMS for security compliance.
Tahmini Süre:2m 0s