PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #256
You are deploying regulated workloads on Google Cloud. The regulation has data residency and data access requirements. It also requires that support is provided from the same geographical location…
The correct answer is B. Deploy Assured Workloads. Assured Workloads is Google Cloud's purpose-built offering for regulated and compliance-sensitive workloads. It enforces data residency by restricting where data and resources are stored, controls data access by limiting personnel who can interact with the environment to…
Question
Options
- AEnable Access Transparency Logging.
- BDeploy Assured Workloads.
- CDeploy resources only to regions permitted by data residency requirements.
- DUse Data Access logging and Access Transparency logging to confirm that no users are
How the community answered
(28 responses)- A4% (1)
- B82% (23)
- C11% (3)
- D4% (1)
Explanation
Assured Workloads is Google Cloud's purpose-built offering for regulated and compliance-sensitive workloads. It enforces data residency by restricting where data and resources are stored, controls data access by limiting personnel who can interact with the environment to specific jurisdictions, and ensures that Google support staff assisting with the workload are located in the same geographical region as the data. This directly addresses all three stated requirements: data residency, data access controls, and geographically constrained support. Option A (Access Transparency Logging) provides audit logs of Google staff access but does not enforce geography or access restrictions. Option C (deploy to permitted regions) addresses data residency only, not the support location requirement. Option D (audit logging) is a detective control, not a preventive or enforcement mechanism.
Topics
Community Discussion
No community discussion yet for this question.