You work for a financial organization in a highly regulated industry that is subject to active regulatory compliance. To meet compliance requirements, you need to continuously maintain a specific…

Question

Options

• AApply an organizational policy constraint at the organization level to limit the location of new
• BCreate an Assured Workloads folder for your required compliance program to apply defined
• CGo to the Compliance page in Security Command Center. View the report for your status against
• DCreate a posture.yaml file with the required security compliance posture. Apply the posture with

• A
  6% (3)
• B
  77% (36)
• C
  13% (6)
• D
  4% (2)

Explanation

Assured Workloads is a Google Cloud solution specifically designed for regulated industries. When you create an Assured Workloads folder, it automatically applies and continuously enforces a complete set of controls for a specific compliance program (e.g., FedRAMP, HIPAA, PCI DSS, IL4, IL5), including: data residency restrictions, organizational policy constraints, personnel access controls (limiting Google staff access to customer data), and approved service configurations. This satisfies all four stated requirements in a single, continuously maintained solution. Option A only addresses data residency for new resources. Option C only provides a compliance status view without enforcement. Option D (security posture via posture.yaml) is a valid governance tool but is more manual and less comprehensive than Assured Workloads for meeting a named compliance program's full set of requirements.

No community discussion yet for this question.