A company is preparing for a SOC 2 audit. They need to provide evidence that access to production data is restricted and monitored. They have enabled Cloud Audit Logs and IAM. What additional step is essential for the audit?

Grant auditors read access to the production project so they can review logs directly.

Export audit logs to a separate project with restricted access to ensure their integrity.

Disable audit logs during the audit to avoid exposing sensitive information.

Use Cloud DLP to redact PII from the logs before the audit.

Which of the following best describes the role of a data processor?

An entity that determines the purposes and means of data processing

A regulator that enforces data protection laws

An entity that processes personal data on behalf of the controller

An individual whose personal data is processed

Which of the following is a key implication of the CCPA for cloud data processing?

It requires all data to be stored within California

It applies only to businesses with more than 10 million customers

It prohibits the use of cloud services for any personal data

It grants California consumers the right to know what personal information is collected and to opt out of its sale

A company stores PII in BigQuery. They need to protect it from unauthorized access and ensure that only authorized users can query it. They also need to audit who accesses the data. What should they implement?

Put BigQuery in a VPC and use VPC Flow Logs to monitor access.

Use Cloud DLP to de-identify the data and store only de-identified data in BigQuery.

Encrypt the data with customer-managed encryption keys (CMEK) and share the key with all analysts.

Use IAM roles to grant access, enable Cloud Audit Logs for BigQuery, and use column-level security to restrict sensitive columns.

Google CloudProfessional Cloud Architect

Domain 3Objective 2

3.2 Designing for Compliance PROFESSIONAL-CLOUD-ARCHITECT Practice Questions (Page 4)

Part of the Designing for security and compliance domain, which accounts for ~17.5% of the PROFESSIONAL-CLOUD-ARCHITECT exam. Google Cloud does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–9 in this domain), expect 5–5 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

10concepts

~17.5%of the exam

Questions 16–20

16expert · medium
A financial services company must store customer data in the EU due to data sovereignty laws. They are evaluating Google Cloud regions. They also need to minimize latency for users in Germany. Which region should they choose?
Select an answer first
17expert · medium
A company is preparing for a SOC 2 audit. They need to provide evidence that access to production data is restricted and monitored. They have enabled Cloud Audit Logs and IAM. What additional step is essential for the audit?
Select an answer first
18foundation · easy
Which of the following best describes the role of a data processor?
Select an answer first
19foundation · easy
Which of the following is a key implication of the CCPA for cloud data processing?
Select an answer first
20application · medium
A company stores PII in BigQuery. They need to protect it from unauthorized access and ensure that only authorized users can query it. They also need to audit who accesses the data. What should they implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-ARCHITECT” is a trademark of its owner, used for identification only.