Google Professional Cloud Security Engineer Question 486
Select 3Google Cloud PlatformYour organization needs to ensure compliance with strict data residency and sovereignty requirements by restricting where Google Cloud resources can be created and ensuring that only specific personnel have access to sensitive data. Which combination of tools should you use to meet these requirements?
- A
Use Assured Workloads to specify regions where resources can be created and enforce compliance controls.
- B
Use Access Transparency to restrict where data can be processed and viewed.
- C
Use organizational policies to restrict resource creation to specific regions.
- D
Enable Access Approval to give specific personnel explicit control over data access requests.
- E
Use VPC Service Controls to enforce data residency by restricting access to specific regions.
Show answer and explanation
Correct answers: A, C, D
Explanation
To meet compliance requirements for data residency and access control, a combination of tools is required. Assured Workloads ensures resources are created in compliant regions, organizational policies enforce regional restrictions, and Access Approval allows specific personnel to control data access requests. While Access Transparency and VPC Service Controls are useful security tools, they do not directly address data residency or access approval requirements in this scenario.
- A. Correct.
Assured Workloads is designed to help meet compliance requirements by enforcing regionalization of resources and ensuring compliance with regulatory frameworks.
- B. Incorrect.
Access Transparency provides audit logs for Google Cloud staff access to your data but does not restrict where data is processed or viewed.
- C. Correct.
Organizational policies can enforce restrictions on where resources are created, which is critical for meeting data residency requirements.
- D. Correct.
Access Approval allows you to explicitly approve or deny access requests for sensitive data, ensuring compliance with access control requirements.
- E. Incorrect.
VPC Service Controls help secure data by defining service perimeters but do not directly enforce region-based data residency requirements.