Google Professional Cloud Security Engineer Question 485
Select 4Google Cloud PlatformYour organization operates in a highly regulated industry and needs to comply with strict data residency and access transparency requirements for its workloads. You are tasked with configuring the appropriate Google Cloud solutions to ensure compliance. Which of the following actions should you take to meet these requirements?
- A
Use Assured Workloads to enforce data residency and compliance controls tailored to your industry.
- B
Enable Access Transparency to log and monitor Google personnel access to your data.
- C
Use Cloud Armor to restrict access to your services based on geographic location.
- D
Configure Access Approval to require explicit approval for Google Cloud personnel to access your data.
- E
Set up an organization policy to restrict the use of Google Cloud services to specific regions.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
To meet compliance requirements for data residency and access transparency, you should use Assured Workloads to enforce compliance guardrails, enable Access Transparency to monitor Google personnel access, configure Access Approval to explicitly approve access requests, and set up organization policies to restrict services to specific regions. Cloud Armor, while useful for other purposes, does not directly address these compliance needs.
- A. Correct.
This is correct. Assured Workloads provides compliance guardrails and supports data residency and regulatory requirements for specific industries.
- B. Correct.
This is correct. Enabling Access Transparency ensures you can monitor and validate any access by Google personnel to your data, a crucial compliance requirement.
- C. Incorrect.
This is incorrect. While Cloud Armor provides security features like geographical restrictions, it is not specifically designed for compliance with data residency or access transparency requirements.
- D. Correct.
This is correct. Access Approval allows you to control and approve Google Cloud personnel's access to your data, meeting compliance requirements.
- E. Correct.
This is correct. Organization policies can enforce the use of services in specific regions, ensuring data residency compliance.