Google Professional Cloud Security Engineer Question 466
Select 3Google Cloud PlatformYour company is migrating its financial services platform to Google Cloud. As part of the migration, you are tasked with ensuring compliance with regulatory requirements such as PCI DSS. Which of the following actions would help ensure adherence to these regulatory standards while using Google Cloud?
- A
Enable Cloud Audit Logs for all services handling sensitive data.
- B
Use Google Cloud's Shared Responsibility Matrix to define roles for compliance.
- C
Store all customer credit card data in Google Cloud Storage without encryption, as Google Cloud provides encryption by default.
- D
Set up access control policies using IAM to ensure least privilege access for users.
- E
Disable all network firewalls since Google Cloud automatically protects your resources.
Show answer and explanation
Correct answers: A, B, D
Explanation
To adhere to regulatory standards like PCI DSS on Google Cloud, organizations must take a proactive approach by enabling logging, clarifying compliance responsibilities, implementing least privilege access, and ensuring proper data protection. Using Google Cloud's built-in tools like Cloud Audit Logs, IAM, and the Shared Responsibility Matrix helps meet these requirements effectively.
- A. Correct.
Enabling Cloud Audit Logs provides a detailed log of all activities, which is critical for PCI DSS compliance as it requires the ability to track and monitor access to cardholder data.
- B. Correct.
The Shared Responsibility Matrix clarifies the division of compliance responsibilities between your organization and Google Cloud, helping you ensure that all regulatory requirements are met.
- C. Incorrect.
Storing customer credit card data without encryption violates PCI DSS requirements. While Google Cloud provides encryption by default, additional controls may be required to meet specific regulatory needs.
- D. Correct.
Implementing least privilege access using IAM aligns with PCI DSS requirements for restricting access to cardholder data to only those who need it for their job responsibilities.
- E. Incorrect.
Disabling network firewalls is a security risk and goes against PCI DSS requirements, which mandate strong access control measures.