PROFESSIONAL-CLOUD-DEVELOPER · Question #248
You are a developer at a financial institution. You use Cloud Shell to interact with Google Cloud services. User data is currently stored on an ephemeral disk; however, a recently passed regulation…
The correct answer is B. Store user data on a persistent disk in a Compute Engine instance. The regulation prohibits storing sensitive data on an ephemeral disk. Cloud Shell's built-in home directory disk (Option A) persists across sessions but is still a Google-managed, session-tied resource that may not satisfy compliance requirements for sensitive financial data…
Question
You are a developer at a financial institution. You use Cloud Shell to interact with Google Cloud services. User data is currently stored on an ephemeral disk; however, a recently passed regulation mandates that you can no longer store sensitive information on an ephemeral disk. You need to implement a new storage solution for your user data. You want to minimize code changes. Where should you store your user data?
Options
- AStore user data on a Cloud Shell home disk, and log in at least every 120 days to prevent its
- BStore user data on a persistent disk in a Compute Engine instance.
- CStore user data in a Cloud Storage bucket.
- DStore user data in BigQuery tables.
How the community answered
(40 responses)- A15% (6)
- B73% (29)
- C5% (2)
- D8% (3)
Explanation
The regulation prohibits storing sensitive data on an ephemeral disk. Cloud Shell's built-in home directory disk (Option A) persists across sessions but is still a Google-managed, session-tied resource that may not satisfy compliance requirements for sensitive financial data, and it has a 120-day inactivity deletion policy. A persistent disk attached to a Compute Engine instance (B) is a durable, fully controlled block storage solution that is not ephemeral, meets compliance standards for sensitive data, and requires minimal code changes - essentially just updating the file path in the application. Cloud Storage (C) and BigQuery (D) would require more significant code refactoring since they use different APIs rather than a standard filesystem interface.
Topics
Community Discussion
No community discussion yet for this question.