Google Professional Cloud Security Engineer Question 497
Select 3Google Cloud PlatformYour organization needs to comply with the GDPR requirement to log and monitor access to sensitive personal data stored in Google Cloud. Which combination of Google Cloud services and security controls can help you meet this requirement?
- A
Enable Cloud Audit Logs to track access to resources and configure log sinks for long-term storage.
- B
Use VPC Service Controls to define secure perimeters around services storing personal data.
- C
Activate Organization Policy to prevent the deletion of sensitive audit logs.
- D
Set up Identity-Aware Proxy (IAP) to enforce context-aware access to sensitive resources.
- E
Configure Cloud Storage lifecycle policies to automatically archive logs after 30 days.
Show answer and explanation
Correct answers: A, B, D
Explanation
To comply with GDPR, organizations must ensure access to sensitive data is logged, monitored, and restricted appropriately. Cloud Audit Logs help track access and changes to resources, VPC Service Controls enforce data access segmentation, and Identity-Aware Proxy provides secure, context-aware access. These controls collectively address GDPR requirements for logging and access monitoring.
- A. Correct.
Correct. Cloud Audit Logs provide a detailed record of administrative activity and data access, which is essential for compliance and monitoring.
- B. Correct.
Correct. VPC Service Controls help by restricting unauthorized data exfiltration and ensuring data access segmentation, aligning with GDPR compliance.
- C. Incorrect.
Incorrect. While Organization Policy can enforce certain restrictions, it doesn’t directly address log retention or GDPR requirements.
- D. Correct.
Correct. Identity-Aware Proxy ensures secure, context-aware access to resources, which is critical for controlling access to sensitive personal data.
- E. Incorrect.
Incorrect. Cloud Storage lifecycle policies can automate log storage management but are not directly relevant to GDPR logging and monitoring requirements.