A social media app is designed for users aged 13 and older, but it may attract younger users. The company wants to avoid COPPA obligations. What is the best approach?

Implement an age-gate that blocks users under 13 from creating accounts, and do not collect personal information from them.

Disable all data collection and analytics features.

Obtain parental consent for all users, regardless of age.

Collect only non-personal information, such as device identifiers, from all users.

During a compliance audit, what is the purpose of collecting evidence?

To prove that the organization is compliant with the applicable requirements

To replace the need for the final report

To provide a basis for marketing claims

A hospital uses Google Cloud to store patient records. They must comply with HIPAA. They need to ensure that only authorized medical staff can access patient data, and that access is logged. What should they configure?

Store patient data in a public Cloud Storage bucket and rely on encryption.

Use a shared service account for all medical staff to simplify access.

Encrypt the data with Google-managed keys and do not enable audit logs to reduce overhead.

Use IAM roles to grant access to specific users, enable Cloud Audit Logs, and use Cloud DLP to inspect and de-identify data where possible.

What is the first step in conducting a compliance audit?

Define the scope and objectives of the audit

Google CloudProfessional Cloud Architect

Domain 3Objective 2

3.2 Designing for Compliance PROFESSIONAL-CLOUD-ARCHITECT Practice Questions (Page 3)

Part of the Designing for security and compliance domain, which accounts for ~17.5% of the PROFESSIONAL-CLOUD-ARCHITECT exam. Google Cloud does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–9 in this domain), expect 5–5 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

10concepts

~17.5%of the exam

Questions 11–15

11expert · medium
A social media app is designed for users aged 13 and older, but it may attract younger users. The company wants to avoid COPPA obligations. What is the best approach?
Select an answer first
12foundation · easy
During a compliance audit, what is the purpose of collecting evidence?
Select an answer first
13application · medium
A hospital uses Google Cloud to store patient records. They must comply with HIPAA. They need to ensure that only authorized medical staff can access patient data, and that access is logged. What should they configure?
Select an answer first
14foundation · easy
Which regulation provides EU residents with rights such as the right to access, rectify, and erase their personal data?
Select an answer first
15foundation · easy
What is the first step in conducting a compliance audit?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-ARCHITECT” is a trademark of its owner, used for identification only.