1.1 Designing for Security and Compliance PROFESSIONAL-DATA-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the primary purpose of an organization policy in Google Cloud?

   • ATo manage billing accounts and cost budgets for all projects in an organization.
   • BTo enforce constraints on how resources can be configured and used across the resource hierarchy.
   • CTo define IAM roles and permissions for users within an organization.
   • DTo create and manage folders and projects within the resource hierarchy.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   Your organization has a security requirement that all data at rest must be encrypted with keys that are managed by your organization, not by Google. You are using Cloud Storage and BigQuery. What should you do?

   • AUse customer-managed encryption keys (CMEK) for both Cloud Storage and BigQuery.
   • BUse customer-supplied encryption keys (CSEK) for both Cloud Storage and BigQuery.
   • CRely on Google's default encryption at rest.
   • DUse Cloud External Key Manager (Cloud EKM) for both Cloud Storage and BigQuery.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which compliance framework is specifically designed to protect health information in the United States?

   • AGDPR
   • BFedRAMP
   • CPCI DSS
   • DHIPAA
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following is an example of a constraint that can be set using an organization policy?

   • ADefining a custom IAM role that grants specific permissions to a service account.
   • BSetting a budget alert when project spending exceeds a certain amount.
   • CRestricting the external IP addresses that can be assigned to VM instances.
   • DRequiring multi-factor authentication for all users in the organization.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   How does Google Cloud help customers meet regulatory compliance requirements?

   • ABy providing compliance certifications and offering services that can be configured to meet specific requirements.
   • BBy ensuring that all data is stored in the United States to comply with US regulations.
   • CBy automatically applying all compliance controls to customer data without any action from the customer.
   • DBy encrypting all data with customer-managed keys, which guarantees compliance with all frameworks.
   Reveal Solution Discussion Select an answer first