Professional Cloud Security EngineerEnsuring data protectionHard
A government agency is migrating highly classified workloads to Google Cloud. They have stringent regulatory requirements that mandate data isolation, sovereign controls, and specific compliance certifications for the underlying infrastructure. They also need to ensure that Google support personnel have limited and controlled access to their environment. Which Google Cloud offering is designed to meet these requirements?
- AConfidential Computing
- BAssured Workloads
- CCloud Security Command Center Premium
- DDedicated Interconnect
Show answer & explanationAnswer & explanation
Correct answer: B. Assured Workloads
Assured Workloads is specifically designed for customers with stringent compliance and sovereignty requirements, such as government agencies. It helps enforce compliance by providing controls over data residency, personnel access (e.g., limiting Google support to specific geographies or personnel), and ensuring workloads run on certified infrastructure (e.g., FedRAMP, IL4, IL5).
Why the other options are wrong
- A. Confidential Computing protects data in use by encrypting memory, but it doesn't provide the broader set of compliance, residency, and personnel access controls required.
- C. Cloud Security Command Center Premium is a security management and risk platform; it doesn't enforce data residency, sovereign controls, or personnel access limitations at the infrastructure level.
- D. Dedicated Interconnect provides private network connectivity, not compliance enforcement or sovereign controls.
Assured Workloads
A Google Cloud offering that helps customers meet compliance and regulatory requirements by establishing a secure and compliant environment for sensitive workloads.
- Enforces data residency and sovereign controls.
- Limits Google personnel access based on geography.
- Supports various compliance regimes (FedRAMP, IL4/IL5, C5, etc.).
Memory trick: Assured Workloads: Your compliance shield, keeping data secure on a regulated field.