Google Professional Cloud Developer Question 86
Select 3Google Cloud PlatformYou are developing a cloud-based application that processes sensitive user data. Your organization operates in multiple regions and is subject to strict regulatory requirements, including GDPR, which mandates that personal data of EU citizens must remain within the EU region. How can you ensure compliance with data residency requirements while designing your application?
- A
Use Cloud Storage with dual-region configurations that include EU regions.
- B
Use a custom encryption key stored in an EU-based Cloud Key Management Service (KMS).
- C
Enable Object Lifecycle Management to automatically delete data after 30 days.
- D
Leverage Cloud Spanner with regional configurations in EU-based locations.
- E
Use a global load balancer to route user data dynamically to the nearest region.
Show answer and explanation
Correct answers: A, B, D
Explanation
To comply with data residency requirements like GDPR, it is essential to ensure that data is stored and processed only within specified regions (e.g., EU). Leveraging dual-region Cloud Storage configurations, regional Cloud Spanner setups, and EU-based encryption keys ensures data residency and security compliance. However, solutions like global load balancing or data lifecycle management do not inherently enforce data residency and might inadvertently cause non-compliance.
- A. Correct.
Using Cloud Storage with dual-region configurations that include EU regions ensures that data is stored only in the specified EU regions, maintaining compliance with GDPR requirements.
- B. Correct.
Using a custom encryption key stored in an EU-based Cloud KMS helps ensure that encryption and decryption operations occur within the EU, which aligns with GDPR residency mandates.
- C. Incorrect.
While enabling Object Lifecycle Management can help manage data retention, it does not address where the data is stored or ensure residency within a specific region.
- D. Correct.
Configuring Cloud Spanner to operate in EU-based regional locations ensures all data remains within the EU, adhering to GDPR data residency requirements.
- E. Incorrect.
Using a global load balancer dynamically routes data to the nearest region, which could result in non-compliance with GDPR if data is routed outside the EU.