You work for a healthcare provider that is expanding into the cloud to store and process sensitive patient data. You must ensure the chosen Google Cloud configuration meets these strict regulatory…

Question

Options

• ASelect a standard Google Cloud region. Restrict access to patient data based on user location
• BDeploy an Assured Workloads environment in an approved region. Configure Access Approval for
• CDeploy an Assured Workloads environment in multiple regions for redundancy. Utilize custom
• DSelect multiple standard Google Cloud regions for high availability. Implement Access Control

• A
  3% (1)
• B
  75% (27)
• C
  6% (2)
• D
  17% (6)

Explanation

Assured Workloads is Google Cloud's compliance framework that enforces data residency, personnel access controls, and regulatory guardrails (e.g., FedRAMP, HIPAA) by restricting which regions data can reside in and which Google personnel can access it. Deploying patient data workloads in an Assured Workloads environment in an approved region satisfies the geographic residency requirement. Configuring Access Approval within that environment requires designated compliance officers to explicitly approve any administrative access by Google, satisfying the approval requirement. Cloud Audit Logs (enabled by default in Assured Workloads) provide full auditability of data access. Options A and D use standard regions which offer no regulatory guardrails. Option C incorrectly deploys across multiple regions, which could violate data residency requirements.

No community discussion yet for this question.