nerdexam
GoogleGoogle

PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #294

PROFESSIONAL-CLOUD-SECURITY-ENGINEER Question #294: Real Exam Question with Answer & Explanation

Sign in or unlock PROFESSIONAL-CLOUD-SECURITY-ENGINEER to reveal the answer and full explanation for question #294. The question stem and answer options stay visible for context.

Submitted by kwame.gh· Apr 18, 2026Ensuring data protection

Question

Your EU-based organization stores both Personally Identifiable Information (PII) and non-PII data in Cloud Storage buckets across multiple Google Cloud regions. EU data privacy laws require that the PII data must not be stored outside of the EU. To help meet this compliance requirement, you want to detect if Cloud Storage buckets outside of the EU contain healthcare data. What should you do?

Options

  • ACreate a Sensitive Data Protection job. Specify the infoType of data to be detected and run the
  • BCreate a log sink with a filter on resourceLocation.currentLocations. Trigger an alert if a log
  • CActivate Security Command Center Premium. Use compliance monitoring to detect resources that
  • DEnforce the gcp.resourceLocations organization policy and add "EU" in a custom rule that only

Unlock PROFESSIONAL-CLOUD-SECURITY-ENGINEER to see the answer

You've previewed enough free PROFESSIONAL-CLOUD-SECURITY-ENGINEER questions. Unlock PROFESSIONAL-CLOUD-SECURITY-ENGINEER for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Sensitive Data Protection#Data Loss Prevention (DLP)#Data Residency#Compliance
Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER PracticeBrowse All PROFESSIONAL-CLOUD-SECURITY-ENGINEER Questions