Google Professional Cloud Security Engineer Question 489
Select 3Google Cloud PlatformYour organization operates in the healthcare industry and must comply with strict data residency and access transparency requirements. You have been asked to configure Google Cloud services to meet these compliance needs. Which combination of settings and tools should you use to ensure compliance?
- A
Enable Assured Workloads and configure a compliance regime for your region.
- B
Use Access Approval to require explicit approval for Cloud IAM role changes.
- C
Implement organizational policies to enforce regionalization of data and services.
- D
Enable Access Transparency logs to track Google support personnel access to your data.
- E
Use Cloud Armor to protect against DDoS attacks and ensure compliance.
Show answer and explanation
Correct answers: A, C, D
Explanation
To meet compliance requirements for data residency and access transparency, you need to use Assured Workloads for compliance regimes, organizational policies to enforce regionalization of data, and Access Transparency to monitor support access to your data. These tools collectively address the regulatory needs of the healthcare industry as outlined in the scenario.
- A. Correct.
Enabling Assured Workloads allows you to configure compliance regimes (e.g., HIPAA, FedRAMP) and ensures that workloads meet data residency and other regulatory requirements.
- B. Incorrect.
Access Approval is used to control support access rather than IAM role changes. While it enhances security, it is not directly tied to the compliance requirements in this scenario.
- C. Correct.
Organizational policies can enforce regionalization to ensure data and services remain in specific locations, which is critical for meeting data residency requirements.
- D. Correct.
Access Transparency provides visibility into Google support personnel access, ensuring compliance with transparency and auditability requirements.
- E. Incorrect.
Cloud Armor is a security tool for protecting applications from DDoS attacks but is unrelated to compliance with data residency or transparency requirements.