Google
PROFESSIONAL-CLOUD-ARCHITECT · Question #218
You are working at a financial institution that stores mortgage loan approval documents on Cloud Storage. Any change to these approval documents must be uploaded as a separate approval file, so you…
The correct answer is A. Create a retention policy on the bucket for the duration of 5 years. If a bucket has a retention policy, objects in the bucket can only be deleted or replaced once their age is greater than the retention period. Once you lock a retention policy, you cannot remove it or reduce the retention period it has.
Submitted by chiamaka_o· Mar 30, 2026Designing for security and compliance
Question
You are working at a financial institution that stores mortgage loan approval documents on Cloud Storage. Any change to these approval documents must be uploaded as a separate approval file, so you want to ensure that these documents cannot be deleted or overwritten for the next 5 years. What should you do?
Options
- ACreate a retention policy on the bucket for the duration of 5 years.
- BCreate the bucket with uniform bucket-level access, and grant a service account the role of
- CUse a customer-managed key for the encryption of the bucket. Rotate the key after 5 years.
- DCreate the bucket with fine-grained access control, and grant a service account the role of Object
How the community answered
(26 responses)- A88% (23)
- C4% (1)
- D8% (2)
Explanation
If a bucket has a retention policy, objects in the bucket can only be deleted or replaced once their age is greater than the retention period. Once you lock a retention policy, you cannot remove it or reduce the retention period it has.
Topics
#Cloud Storage retention policy#data immutability#compliance#WORM storage
Community Discussion
No community discussion yet for this question.