CompTIA Cloud+ (CV0-004)SecurityHard
A global enterprise operates in multiple regulated industries, each with unique data residency and compliance requirements. They are planning to deploy a new application that will process sensitive customer data across various cloud regions. The security architect needs to implement a solution that ensures data remains within specific geopolitical boundaries and adheres to local regulations. Which architectural pattern is best suited for addressing these complex data residency and compliance needs?
- AMulti-region deployment with localized data storage.
- BServerless architecture leveraging edge computing.
- CSingle-region deployment with global CDN.
- DHybrid cloud deployment extending on-premises to a single public cloud region.
Show answer & explanationAnswer & explanation
Correct answer: A. Multi-region deployment with localized data storage.
A multi-region deployment with localized data storage directly addresses data residency and compliance requirements by ensuring that data processed for customers in a specific geopolitical region remains stored within that region's boundaries. This prevents data from crossing regulated borders and allows adherence to local laws, unlike other options that either centralize data or don't guarantee localized storage.
Why the other options are wrong
- B. Serverless architecture and edge computing might optimize performance but do not inherently guarantee data localization to meet specific geopolitical residency requirements for sensitive customer data.
- C. A single-region deployment, even with a global CDN, would centralize data in one location, violating data residency for other regions.
- D. A hybrid cloud extending to a single public cloud region would still centralize data in that public region, failing to meet multi-region data residency.
Localized Data Storage
Storing data within specific geographic boundaries to comply with data residency regulations and ensure adherence to local laws and governance.
- Data stored within specific geopolitical regions
- Complies with data residency laws
- Supports multi-region regulatory adherence
Memory trick: Keep data where it belongs, region by region, for strict compliance.