How to centralize data using a GUI with CMEK?

PDE By islever Editorial Last updated

Short answer

D Use Cloud Data Fusion to move files into Cloud Storage.

Question

You have several different unstructured data sources, within your on-premises data center as well as in the cloud. The data is in various formats, such as Apache Parquet and CSV. You want to centralize this data in Cloud Storage. You need to set up an object sink for your data that allows you to use your own encryption keys. You want to use a GUI-based solution. What should you do?
  1. Use BigQuery Data Transfer Service to move files into BigQuery.
  2. Use Storage Transfer Service to move files into Cloud Storage
  3. Use Dataflow to move files into Cloud Storage
  4. Use Cloud Data Fusion to move files into Cloud Storage. Correct Answer

Key Takeaways

The question tests the ability to distinguish between transfer utilities and ETL tools, specifically identifying Cloud Data Fusion as the GUI-based solution that supports CMEK for data movement.

To centralize unstructured data in Cloud Storage using a GUI and Customer Managed Encryption Keys (CMEK), Cloud Data Fusion is the correct service. It provides a fully managed, graphical interface for building data pipelines that supports custom encryption.

Common mistake: Selecting Storage Transfer Service (Option B) because it moves data to Cloud Storage and supports encryption, but failing to recognize that the exam specifically associates the

Expert Analysis

Why the Answer Is Correct

Cloud Data Fusion is a fully managed, cloud-native data integration service that provides a graphical user interface (GUI) for building and managing data pipelines. It supports various data formats like Parquet and CSV, and allows users to configure Customer Managed Encryption Keys (CMEK) to secure data at rest in the Cloud Storage sink, satisfying all the constraints listed in the scenario.

Why the Other Options Are Wrong

Option A is incorrect because BigQuery Data Transfer Service is designed to move data into BigQuery, not Cloud Storage. Option B, Storage Transfer Service, moves files to Cloud Storage and supports CMEK, but is generally classified as a transfer utility rather than the primary GUI-based pipeline solution the question seeks. Option C, Dataflow, is a serverless data processing service that primarily requires code (Apache Beam) rather than a GUI for pipeline definition.

Community Comment Notes

The community consensus heavily favors Option D, with commenters explicitly stating that Cloud Data Fusion is the only GUI-based solution among the choices. Users noted that while Storage Transfer Service supports CMEK in-transit, the specific requirement for a GUI-based solution points directly to Data Fusion.

Official Reference

https://cloud.google.com/storage-transfer/docs

This link opens the official vendor documentation in a new tab.

Exam Strategy

When a Google Cloud data movement question specifies a "GUI-based solution" or "graphical interface," immediately filter for Cloud Data Fusion. Do not be distracted by other services that technically perform the data transfer but rely on command-line or code-based interfaces.

Community Votes

D
64%
B
36%

64% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 5 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 5

  1. noiz 👍 4 Answered B
    Is B incorrect? Transfer service + CloudKMS
  2. m_a_p_s 👍 3 Answered D
    D - only Cloud Data Fusion is a GUI-based solution.
  3. Pime13 👍 1 Answered D
    Cloud Data Fusion is a fully managed, cloud-native data integration service that provides a graphical interface for building and managing data pipelines. It supports various data formats and allows you to use your own encryption keys for secure data transfer
  4. apoio.certificacoes.closer 👍 1 Answered D
    I have read in previous questions that Transfer Services only uses CMEK in-transit. https://cloud.google.com/storage-transfer/docs/on-prem-security#in-flight
  5. skycracker 👍 2 Answered D
    data fusion allows encryption

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

← Back to PDE Study Guide