Google Cloud’s Trust Principles and Compliance CLOUD-DIGITAL-LEADER Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company is migrating a legacy application to Google Cloud. The application stores sensitive customer data. The security team is debating who is responsible for patching the operating system of the virtual machines. The company wants to minimize its operational burden while maintaining security. What should the company do?

   • AUse Google Kubernetes Engine (GKE) with node auto-upgrades enabled, so Google patches the underlying OS, while the company manages its container images.
   • BUse Cloud Functions and assume Google patches the runtime, but the company must patch the underlying VM.
   • CUse App Engine and manually patch the operating system of the instances.
   • DUse Compute Engine virtual machines and rely on Google Cloud to patch the OS automatically.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the main function of Compliance Reports Manager?

   • ATo help customers access and manage compliance reports
   • BTo automatically generate compliance reports for customer applications
   • CTo provide real-time security alerts to customers
   • DTo replace the need for third-party audits
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   How does Google Cloud help organizations meet data sovereignty requirements?

   • ABy automatically storing all data in the customer's home country
   • BBy encrypting all data with customer-managed keys
   • CBy preventing any data from leaving the country once stored
   • DBy offering data location controls that allow customers to choose where their data is stored
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   How do transparency reports support customer trust?

   • ABy providing a forum for customers to report security vulnerabilities
   • BBy disclosing aggregated information about government data requests and security practices
   • CBy guaranteeing that no government requests are ever fulfilled
   • DBy revealing the exact security measures used to protect every customer's data
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A financial services company is required by its regulator to provide evidence of independent security assessments of its cloud provider. The company wants to use Google Cloud but needs to satisfy this requirement. What should the company do?

   • AConduct its own penetration test of Google Cloud's physical data centers.
   • BReview Google Cloud's independent third-party audit reports, such as SOC 2 and ISO 27001, available through Compliance Reports Manager.
   • CRely on Google Cloud's marketing materials that claim full compliance with all regulations.
   • DRequest that Google Cloud sign a custom agreement stating that no security incidents have ever occurred.
   Reveal Solution Discussion Select an answer first