nerdexam
Google

PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #344

Your organization has a workload that is regulated by European laws. You must restrict the creation of resources outside of the EU for this specific workload. You must find an effective way to…

The correct answer is D. Implement an organization policy that only allows the EU as the location for your workload's. Implementing an organization policy that restricts resource locations to the EU for the specific project or folder enforces location constraints at the policy level, ensuring resources cannot be created outside the EU. This method is efficient, scalable, and does not disrupt…

Submitted by naveen.iyer· Apr 18, 2026Ensuring compliance

Question

Your organization has a workload that is regulated by European laws. You must restrict the creation of resources outside of the EU for this specific workload. You must find an effective way to implement this security control without disrupting the other global applications. What should you do?

Options

  • ACreate a Cloud Function triggered at asset creation that detects and deletes resources outside of
  • BCreate all your workload's assets in a regional subnet in the EU in one project or folder.
  • CSegment your workload in the EU in one project or folder by using VPC Service Controls.
  • DImplement an organization policy that only allows the EU as the location for your workload's

How the community answered

(30 responses)
  • A
    7% (2)
  • B
    3% (1)
  • C
    13% (4)
  • D
    77% (23)

Explanation

Implementing an organization policy that restricts resource locations to the EU for the specific project or folder enforces location constraints at the policy level, ensuring resources cannot be created outside the EU. This method is efficient, scalable, and does not disrupt other global applications because it can be scoped precisely to the relevant projects or folders.

Topics

#Organization Policy#Resource Location Restriction#Compliance#Geographical Restriction

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice