Professional Cloud Security EngineerEnsuring data protectionHard
A global pharmaceutical company is using Google Cloud for its clinical trial data. They have strict regulatory requirements (e.g., HIPAA, GDPR) that mandate data residency, personnel access controls, and support for specific compliance frameworks. They need to ensure their Google Cloud environment automatically adheres to these requirements, including restricting data to specific geographic regions and ensuring Google Cloud personnel access is limited and auditable. Which Google Cloud solution is designed to help customers meet these stringent compliance and sovereignty requirements?
- AVPC Service Controls
- BOrganization Policy Service
- CCloud Identity and Access Management (IAM)
- DAssured Workloads
Show answer & explanationAnswer & explanation
Correct answer: D. Assured Workloads
Assured Workloads directly addresses stringent compliance and sovereignty requirements by providing a Google Cloud environment that helps enforce data residency, restrict Google personnel access, and align with specific compliance frameworks like HIPAA, PCI DSS, and FedRAMP. It automates the configuration of controls to meet these mandates.
Why the other options are wrong
- A. VPC Service Controls create a data perimeter but don't directly address personnel access, data residency, or specific compliance frameworks beyond data exfiltration.
- B. Organization Policy Service allows setting constraints on resource creation and configuration but doesn't provide a holistic, pre-configured environment for complex compliance like Assured Workloads.
- C. IAM manages user access to resources but doesn't automatically enforce data residency, restrict Google personnel, or configure for specific compliance regimes.
Google Cloud Assured Workloads
A Google Cloud service that helps customers establish a compliant environment for sensitive workloads by automating the enforcement of controls for data residency, personnel access, and specific regulatory frameworks.
- Simplifies compliance with HIPAA, PCI DSS, FedRAMP, etc.
- Enforces data residency requirements.
- Restricts Google Cloud personnel access based on customer needs.
Memory trick: Assured Workloads makes compliance simple, like a pre-built house.