Google Professional Cloud Developer Question 90
Select 3Google Cloud PlatformYour company operates in multiple regions and needs to store customer data in compliance with GDPR, which mandates that EU customer data must remain within the European Union. You are tasked with designing a data storage architecture on Google Cloud that ensures compliance with these regulatory requirements. Which of the following approaches should you implement?
- A
Use Cloud Storage with multi-region buckets located in Europe to store EU customer data.
- B
Enable Object Versioning on Cloud Storage to maintain a history of changes for compliance purposes.
- C
Use Cloud Storage dual-region buckets that include at least one location outside the EU to ensure better redundancy.
- D
Implement CMEK (Customer-Managed Encryption Keys) to encrypt data and ensure control over encryption keys.
- E
Use Google Cloud's Resource Location Restriction policy to enforce data residency in the EU for all relevant resources.
Show answer and explanation
Correct answers: A, D, E
Explanation
To meet GDPR's data residency requirements, EU customer data must remain within the European Union. Using multi-region buckets located in Europe ensures this compliance. Additionally, enabling CMEK provides control over encryption keys, aligning with GDPR's data protection rules. Resource Location Restriction policies help enforce compliance by restricting the creation of resources to specific locations, such as the EU.
- A. Correct.
Correct. Multi-region buckets located in Europe ensure that data remains within the EU, which complies with GDPR's data residency requirements.
- B. Incorrect.
Incorrect. While Object Versioning helps with data integrity and compliance, it does not address the specific requirement of keeping data within the EU.
- C. Incorrect.
Incorrect. Dual-region buckets that include a location outside the EU violate GDPR's requirement for EU customer data to remain within the EU.
- D. Correct.
Correct. CMEK allows you to control and manage encryption keys, which is an important aspect of compliance with GDPR's data protection requirements.
- E. Correct.
Correct. Resource Location Restriction policies can enforce data residency at the organization or project level, ensuring that resources remain in the EU.