Google Professional Cloud Security Engineer Question 468
Select 3Google Cloud PlatformYour organization processes sensitive financial data and operates in multiple regions, including the European Union (EU) and the United States. You are tasked with ensuring that your Google Cloud architecture complies with regulatory requirements such as GDPR, PCI DSS, and the US CLOUD Act. Which of the following actions should you take to adhere to these requirements?
- A
Enable data residency controls to store sensitive EU customer data only in EU regions.
- B
Implement encryption for all data at rest and in transit using customer-managed encryption keys (CMEK).
- C
Grant full administrative access to all engineers globally for faster incident response times.
- D
Use Access Transparency to monitor actions taken by Google support or engineering teams on your data.
- E
Deploy a publicly accessible Cloud Storage bucket for sensitive financial data to ensure operational simplicity.
Show answer and explanation
Correct answers: A, B, D
Explanation
To comply with regulatory and industry standards like GDPR, PCI DSS, and the US CLOUD Act, you must implement controls such as data residency, encryption with customer-managed keys, and comprehensive monitoring of access to data. These measures help ensure data security, privacy, and compliance with legal obligations. Actions that increase the risk of unauthorized access or reduce control over sensitive data are non-compliant and should be avoided.
- A. Correct.
Correct: Enabling data residency controls ensures compliance with GDPR, as it mandates that EU customer data remains within EU borders unless explicitly allowed.
- B. Correct.
Correct: Implementing encryption with CMEK allows you to have greater control over encryption keys, aligning with PCI DSS requirements for securing sensitive financial data.
- C. Incorrect.
Incorrect: Granting full administrative access to all engineers globally increases the risk of data breaches and non-compliance with regulations, which require strict access control.
- D. Correct.
Correct: Access Transparency provides audit logs for actions taken by Google employees, helping you meet regulatory requirements for monitoring and accountability.
- E. Incorrect.
Incorrect: Deploying a publicly accessible Cloud Storage bucket violates both GDPR and PCI DSS requirements, which mandate strict data access controls and security.