nerdexam
Google

PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #256

You are deploying regulated workloads on Google Cloud. The regulation has data residency and data access requirements. It also requires that support is provided from the same geographical location…

The correct answer is B. Deploy Assured Workloads. Assured Workloads is Google Cloud's purpose-built offering for regulated and compliance-sensitive workloads. It enforces data residency by restricting where data and resources are stored, controls data access by limiting personnel who can interact with the environment to…

Submitted by dimitri_ru· Apr 18, 2026Ensuring compliance

Question

You are deploying regulated workloads on Google Cloud. The regulation has data residency and data access requirements. It also requires that support is provided from the same geographical location as where the data resides. What should you do?

Options

  • AEnable Access Transparency Logging.
  • BDeploy Assured Workloads.
  • CDeploy resources only to regions permitted by data residency requirements.
  • DUse Data Access logging and Access Transparency logging to confirm that no users are

How the community answered

(28 responses)
  • A
    4% (1)
  • B
    82% (23)
  • C
    11% (3)
  • D
    4% (1)

Explanation

Assured Workloads is Google Cloud's purpose-built offering for regulated and compliance-sensitive workloads. It enforces data residency by restricting where data and resources are stored, controls data access by limiting personnel who can interact with the environment to specific jurisdictions, and ensures that Google support staff assisting with the workload are located in the same geographical region as the data. This directly addresses all three stated requirements: data residency, data access controls, and geographically constrained support. Option A (Access Transparency Logging) provides audit logs of Google staff access but does not enforce geography or access restrictions. Option C (deploy to permitted regions) addresses data residency only, not the support location requirement. Option D (audit logging) is a detective control, not a preventive or enforcement mechanism.

Topics

#Assured Workloads#Regulatory Compliance#Data Residency#Personnel Access Controls

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice