A gaming company launches an app for children under 13 and must comply with COPPA. They collect usernames and device identifiers. They plan to use Google Analytics for Firebase. What is the required configuration?

Anonymize all data before sending it to analytics, so no consent is needed.

Obtain verifiable parental consent before collecting any personal information, and configure analytics to disable data collection for child users.

Provide a clear privacy policy and rely on the app store's age rating to ensure compliance.

Use a third-party analytics tool that does not store data in the US.

Which of the following is a key PCI DSS requirement for protecting cardholder data?

Encrypt cardholder data when stored and transmitted across open, public networks

Store the full magnetic stripe data for faster transactions

Use a shared hosting provider without any additional controls

Allow all employees access to cardholder data to improve efficiency

A retail company processes credit card payments in Google Cloud. They must comply with PCI DSS. They use a third-party payment processor for card transactions but store some cardholder data in Cloud Storage for analytics. What is a key requirement they must implement?

Ensure the payment processor is PCI DSS compliant, and do not store any cardholder data.

Store cardholder data in a separate project with no internet access.

Encrypt cardholder data at rest and in transit, and restrict access to it on a need-to-know basis.

Tokenize all cardholder data before storing it, and then no further controls are needed.

Which of the following is a key element that should be captured in an audit log for effective auditing?

The user's social security number

Google CloudProfessional Cloud Architect

Domain 3Objective 2

3.2 Designing for Compliance PROFESSIONAL-CLOUD-ARCHITECT Practice Questions (Page 2)

Part of the Designing for security and compliance domain, which accounts for ~17.5% of the PROFESSIONAL-CLOUD-ARCHITECT exam. Google Cloud does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–9 in this domain), expect 5–5 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

10concepts

~17.5%of the exam

Questions 6–10

6application · medium
A gaming company launches an app for children under 13 and must comply with COPPA. They collect usernames and device identifiers. They plan to use Google Analytics for Firebase. What is the required configuration?
Select an answer first
7foundation · easy
Which of the following is a key PCI DSS requirement for protecting cardholder data?
Select an answer first
8application · medium
A retail company processes credit card payments in Google Cloud. They must comply with PCI DSS. They use a third-party payment processor for card transactions but store some cardholder data in Cloud Storage for analytics. What is a key requirement they must implement?
Select an answer first
9foundation · easy
Which of the following is a key element that should be captured in an audit log for effective auditing?
Select an answer first
10foundation · easy
Which standard defines requirements for securely handling credit card data in cloud environments?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-ARCHITECT” is a trademark of its owner, used for identification only.