Google Professional Cloud Security Engineer Question 496
Select 3Google Cloud PlatformYour company needs to comply with GDPR regulations, which require detailed audit logging for data access and the ability to segment network traffic between environments. As a Google Cloud Security Engineer, what steps should you take to map these compliance requirements to Google Cloud services and security controls?
- A
Enable Cloud Audit Logs for all relevant services and ensure 'Data Access' logs are activated.
- B
Use Google Cloud Armor to segment network traffic between environments.
- C
Implement VPC Service Controls to restrict data movement across boundaries and enforce network segmentation.
- D
Configure IAM roles with the principle of least privilege to restrict access to sensitive data.
- E
Use Cloud Functions to automatically generate GDPR compliance reports.
Show answer and explanation
Correct answers: A, C, D
Explanation
To meet GDPR compliance requirements in Google Cloud, you need to focus on logging access to sensitive data, restricting unauthorized data movement, and reducing access permissions. Cloud Audit Logs, VPC Service Controls, and IAM roles configured with the principle of least privilege are the most effective tools for achieving these goals. Google Cloud Armor and Cloud Functions, while useful for other purposes, are not directly relevant to the specific compliance requirements in this scenario.
- A. Correct.
Correct: Enabling Cloud Audit Logs, especially 'Data Access' logs, is crucial for tracking and auditing access to sensitive data, which aligns with GDPR requirements.
- B. Incorrect.
Incorrect: While Google Cloud Armor is useful for protecting applications from external threats, it is not designed for network segmentation within environments.
- C. Correct.
Correct: VPC Service Controls are highly effective for segmenting networks and restricting data movement, ensuring compliance with GDPR's requirements for data protection.
- D. Correct.
Correct: Configuring IAM roles with the principle of least privilege reduces the risk of unauthorized data access, a key GDPR compliance requirement.
- E. Incorrect.
Incorrect: Cloud Functions are not suitable for generating GDPR compliance reports. Compliance typically involves a combination of logging, monitoring, and policy enforcement.