Google Professional Cloud Developer Question 87
Select 3Google Cloud PlatformYou are developing an application for a financial services company that operates in both the United States and Europe. The application processes sensitive customer data and must comply with both GDPR (General Data Protection Regulation) and CCPA (California Consumer Privacy Act). To meet regulatory requirements for data residency and lifecycle management, which of the following Google Cloud services and practices should you implement?
- A
Use Google Cloud Storage with multi-region buckets to store customer data.
- B
Enable Object Lifecycle Policies in Cloud Storage to automatically delete or archive data after a defined retention period.
- C
Use Cloud Data Loss Prevention (DLP) API to classify and tokenize sensitive data before storage.
- D
Configure Cloud Storage buckets with specific regions, such as 'us-central1' for U.S. data and 'europe-west1' for European data.
- E
Disable all logging and monitoring services to avoid storing sensitive customer data in logs.
Show answer and explanation
Correct answers: B, C, D
Explanation
To comply with data residency and lifecycle management requirements under regulations like GDPR and CCPA, it is important to ensure data is stored in specific geographic regions and managed according to defined retention policies. Practices like using regional buckets, enabling Object Lifecycle Policies, and leveraging tools like the Cloud DLP API contribute to compliance by addressing data residency, sensitive data protection, and retention requirements. Avoiding multi-region buckets and disabling logging are not appropriate solutions for regulatory compliance.
- A. Incorrect.
Storing customer data in multi-region buckets does not guarantee compliance with data residency requirements, as it may result in data being stored in multiple locations outside the required regions.
- B. Correct.
Object Lifecycle Policies allow for the automatic deletion or archiving of data, which is essential for managing data retention and complying with regulations like GDPR and CCPA.
- C. Correct.
The Cloud DLP API helps classify and tokenize sensitive data, ensuring it is protected and managed appropriately in compliance with regulatory requirements.
- D. Correct.
Configuring Cloud Storage buckets with specific regions ensures data residency compliance by keeping data within designated geographic locations.
- E. Incorrect.
Disabling logging and monitoring is not a recommended practice, as it reduces visibility into application behavior and security. Instead, sensitive data in logs should be redacted or anonymized if necessary.