Your company is storing files on Cloud Storage. To comply with local regulations, you want to ensure that uploaded files cannot be deleted within the first 5 years. It should not be possible to…

Question

Options

• AApply a retention period of 5 years to the bucket, and lock the bucket.
• BEnable Temporary hold and apply a retention period of 5 years to the bucket.
• CUse Cloud IAM to ensure that nobody has an IAM role that has the permissions to delete files
• DCreate an object lifecycle rule using the Age condition and the Delete action. Set the Age

• A
  74% (37)
• B
  8% (4)
• C
  14% (7)
• D
  4% (2)

Explanation

A is correct because Bucket Lock allows you to configure a data retention policy for a Cloud Storage bucket that governs how long objects in the bucket must be retained. The feature also allows you to lock the data retention policy, permanently preventing the policy from being reduced B is not correct because object holds can be easily released by operators/admins. C is not correct because an admin can grant themselves or someone else enough rights to tamper with the files in Cloud Storage. D is not correct because Age condition and a Delete action does not prevent objects from being manually deleted before the Age condition is met. https://cloud.google.com/storage/docs/bucket-lock

No community discussion yet for this question.