Google Professional Cloud Security Engineer Question 488
Single answerGoogle Cloud PlatformYour organization operates in a highly regulated industry and must ensure compliance with regional data residency requirements. You are tasked with configuring Google Cloud to restrict resources and data processing to a specific geographic location. Which configuration should you implement to meet this compliance requirement?
- A
Use Assured Workloads to enforce region-based restrictions for workloads and data residency.
- B
Enable Access Approval to restrict access to data by Google personnel based on geographic location.
- C
Set up Access Transparency to monitor data access events based on location.
- D
Define an organization policy to restrict resource locations to the required geographic region.
Show answer and explanation
Correct answer: A
Explanation
Assured Workloads is the most appropriate solution when compliance with regional data residency and processing requirements is needed. It provides specialized tools for aligning with regulatory requirements and ensures workloads and data are restricted to specific geographic regions. Organization policies can restrict resource locations, but Assured Workloads is purpose-built for compliance in regulated environments, making it the most comprehensive solution.
- A. Correct.
Assured Workloads is specifically designed to enforce compliance requirements, including region-based restrictions for data residency and workload locations. This ensures compliance with geographic restrictions.
- B. Incorrect.
Access Approval is used to grant or deny access for Google personnel when they request access to your data, but it does not enforce geographic restrictions for data residency.
- C. Incorrect.
Access Transparency logs provide visibility into Google personnel's access to your data, but it does not restrict or enforce geographic data residency requirements.
- D. Incorrect.
While organization policies can restrict resource locations, they lack the broader compliance-specific functionality provided by Assured Workloads for regulated industries.