Google Professional Cloud Developer Question 89
Select 3Google Cloud PlatformYour organization operates in multiple countries, each with its own data residency and compliance requirements. You are tasked with designing a cloud-based solution to store sensitive user data while ensuring compliance with regulations such as GDPR and data residency laws. How can you implement a solution in Google Cloud to meet these requirements?
- A
Use Cloud Storage with multi-region bucket locations to ensure data is globally available and compliant with all residency requirements.
- B
Leverage Google Cloud's 'Assured Workloads' to configure compliance settings and restrict data to specific regions.
- C
Use BigQuery with a regional dataset to store data in the region required for compliance.
- D
Implement a data retention policy using Object Lifecycle Management to automatically delete data after a specific period.
- E
Enable VPC Service Controls to prevent unauthorized data movement across regional boundaries.
Show answer and explanation
Correct answers: B, C, E
Explanation
To comply with data residency and regulatory requirements, it is essential to store and process data within specific geographic regions. 'Assured Workloads' and BigQuery's regional datasets allow you to meet these residency requirements. Additionally, VPC Service Controls help prevent unauthorized data movement between regions, further ensuring compliance. Multi-region buckets and Object Lifecycle Management, while useful in other scenarios, do not specifically address residency or compliance needs.
- A. Incorrect.
Using multi-region bucket locations does not guarantee compliance with strict data residency regulations, as data may be replicated across multiple regions.
- B. Correct.
'Assured Workloads' allows you to configure and enforce compliance settings, including restricting data to specific geographic regions, making it suitable for regulatory requirements.
- C. Correct.
BigQuery's regional datasets enable you to store data in a specific region, ensuring compliance with data residency laws of that region.
- D. Incorrect.
While Object Lifecycle Management helps with data retention policies, it does not directly address data residency or regulatory compliance.
- E. Correct.
VPC Service Controls provide an added layer of security by preventing unauthorized data movement across regions, which supports compliance with residency laws.