Certified Cloud Security Professional (CCSP)Cloud Platform and Infrastructure SecurityMedium
A security auditor is reviewing a cloud environment for compliance with data residency regulations. The organization stores sensitive customer data in a regional cloud storage service. The auditor needs to confirm that the data never leaves the specified geographic region, even for backup or disaster recovery purposes. Which cloud storage configuration ensures this strict data residency requirement?
- ARegional Storage Class
- BCross-Region Replication (CRR)
- CMulti-Region Storage Class
- DZonal Redundancy
Show answer & explanationAnswer & explanation
Correct answer: A. Regional Storage Class
A Regional Storage Class ensures that all data, including backups and replicas, remains within a single defined geographic region, satisfying strict data residency requirements.
Why the other options are wrong
- B. CRR explicitly moves data to another region, violating data residency.
- C. Multi-Region Storage Class distributes data across multiple regions for high availability, violating single-region residency.
- D. Zonal Redundancy keeps data within a single region but distributes it across multiple availability zones for resilience, not across regions.
Regional Cloud Storage
A cloud storage configuration where data is stored and replicated exclusively within a single, specified geographic region, ensuring data residency.
- Guarantees data remains within a defined geographical boundary.
- Important for compliance with data residency laws (e.g., GDPR, CCPA).
- Offers high availability within the region, but not across regions.
Memory trick: Data residency is about where your data 'lives'. If it HAS to stay in one specific house, you choose a REGIONAL storage plan, not one that lets it travel.