Google Professional Cloud Developer Question 88
Select 3Google Cloud PlatformYou are developing a cloud-based application for a financial services company that operates in multiple regions, including the EU. The company must comply with GDPR regulations, which require customer data to be stored and processed only within the EU. How can you ensure compliance with these requirements while designing the application on Google Cloud?
- A
Use Google Cloud's resource location policies to restrict data storage and processing to EU regions.
- B
Configure Cloud Storage buckets and database instances to reside in specific EU regions like 'europe-west1' or 'europe-west4'.
- C
Set up VPC Service Controls to isolate and secure data transfers within the EU perimeter.
- D
Rely on Google's default data residency policies without explicitly configuring any settings.
- E
Use the Cloud Data Loss Prevention (DLP) API to automatically move data outside the EU if it contains sensitive information.
Show answer and explanation
Correct answers: A, B, C
Explanation
To comply with GDPR's data residency requirements, you must explicitly configure your resources to reside in EU regions using Google Cloud's resource location policies and services like Cloud Storage and databases. Additionally, VPC Service Controls can help secure data transfers and prevent unauthorized access to ensure data remains within EU boundaries. Relying on default settings or misusing tools like the DLP API will not guarantee compliance.
- A. Correct.
Correct. Google Cloud's resource location policies allow you to enforce the residency requirements by restricting resources to specific geographical locations, such as the EU.
- B. Correct.
Correct. Explicitly configuring Cloud Storage buckets and database instances to reside in EU regions ensures compliance with GDPR data residency requirements.
- C. Correct.
Correct. VPC Service Controls can add an additional layer of security by creating a perimeter to prevent unauthorized data transfers outside of the EU.
- D. Incorrect.
Incorrect. While Google Cloud provides strong data residency guarantees, relying solely on default settings without explicitly configuring regional restrictions might not meet strict regulatory requirements.
- E. Incorrect.
Incorrect. The Cloud Data Loss Prevention (DLP) API is a tool for identifying sensitive data, not for ensuring data residency compliance. Moving sensitive data outside the EU would violate GDPR requirements.