Google Cloud’s Trust Principles and Compliance CLOUD-DIGITAL-LEADER Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   In the shared responsibility model, which of the following is typically the customer's responsibility?

   • APatching the operating system of a managed service like Cloud SQL
   • BSecuring the hypervisor that runs virtual machines
   • CPhysical security of data centers
   • DManaging access to data stored in cloud services
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A global bank must comply with data residency laws in multiple countries. It also needs to minimize latency for its customers. The bank is planning to use Google Cloud. What is the most effective approach to meet both requirements?

   • AUse a single region and rely on encryption to satisfy residency requirements.
   • BDeploy resources in multiple regions, each within the required country, and use data residency controls to keep data in the appropriate region.
   • CDeploy all resources in a single region and use a global load balancer to route traffic.
   • DUse the Compliance Resource Center to find a region that satisfies all countries' laws.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which statement correctly reflects the shared responsibility model in Google Cloud?

   • AThe customer is responsible for securing the physical infrastructure, and Google Cloud is responsible for everything else.
   • BThe customer is responsible for all security controls, and Google Cloud only provides the raw compute resources.
   • CGoogle Cloud is responsible for securing everything, and the customer has no security responsibilities.
   • DGoogle Cloud and the customer share security responsibilities, with the division depending on the service type.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   How does Compliance Reports Manager support organizations in meeting regulatory requirements?

   • ABy providing a centralized way to access compliance reports needed for audits
   • BBy allowing customers to create their own compliance certifications
   • CBy providing a direct line to Google Cloud's legal team
   • DBy automatically ensuring that all data is compliant with regulations
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company's compliance officer needs to verify that Google Cloud has been independently assessed for security controls. The officer wants to see the actual audit reports. What should the officer do?

   • AReview the Compliance Resource Center for a summary of audit results.
   • BContact Google Cloud sales to request a custom audit.
   • CCheck the Transparency Report for audit findings.
   • DAccess the audit reports through Compliance Reports Manager.
   Reveal Solution Discussion Select an answer first