nerdexam
Google

PROFESSIONAL-CLOUD-ARCHITECT · Question #361

You are designing the storage configuration for a critical Cloud Storage bucket. This bucket will store trade confirmation documents for a financial services company. These documents are immutable…

The correct answer is D. Enable Object Versioning on the bucket. Additionally, configure the bucket with a Bucket Lock. Object Versioning allows rapid recovery by preserving older versions of objects that are deleted or overwritten. Bucket Lock with a seven-year retention policy enforces immutability by making it impossible for anyone, including administrators, to delete or modify objects before…

Submitted by andreas_gr· Mar 30, 2026Designing for security and compliance

Question

You are designing the storage configuration for a critical Cloud Storage bucket. This bucket will store trade confirmation documents for a financial services company. These documents are immutable and serve as a legal record. Your design must meet two primary data protection requirements: - The system must allow for the rapid recovery of any document that is accidentally deleted or maliciously overwritten. - Once a document is written, it must be impossible for anyone, including administrators, to delete or modify it for seven years. What should you do?

Options

  • AGrant only the roles/storage.objectCreator IAM role to the application's service account. Remove
  • BUse Storage Transfer Service to create a daily replication job that synchronizes the bucket to a
  • CConfigure an Object Lifecycle Management rule on the bucket to ensure all objects are retained
  • DEnable Object Versioning on the bucket. Additionally, configure the bucket with a Bucket Lock

How the community answered

(43 responses)
  • A
    5% (2)
  • B
    12% (5)
  • C
    2% (1)
  • D
    81% (35)

Explanation

Object Versioning allows rapid recovery by preserving older versions of objects that are deleted or overwritten. Bucket Lock with a seven-year retention policy enforces immutability by making it impossible for anyone, including administrators, to delete or modify objects before the retention

Topics

#Object Versioning#Bucket Lock#immutable storage#data retention policy

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full PROFESSIONAL-CLOUD-ARCHITECT Practice