Google Cloud Professional Data Engineer · Free practice question 3 of 12
Assured Workloads for sovereign controls
Kerensa Health, a European provider, must make sure that new projects for its analytics platform keep data in EU regions, limit support access to EU personnel and enforce these rules automatically as teams create resources. What should the cloud team set up?
- A.Labels on each project marking it as EU-only
- B.A VPC Service Controls perimeter around the analytics projects
- C.An Assured Workloads folder with an EU data residency and support control package, and create the analytics projects in it
- D.Instructions for teams to always choose EU locations when creating datasets
Show answer and explanation
Correct answer: C. An Assured Workloads folder with an EU data residency and support control package, and create the analytics projects in it
Why: Assured Workloads applies a control package to a folder, enforcing allowed locations through organization policies and providing personnel and support controls for the regime chosen. Labels and written guidance enforce nothing. VPC Service Controls limit data movement across a perimeter but do not restrict resource locations or support personnel.
More free Google Cloud Professional Data Engineer questions
- Sliding windows for moving averages
- Turbo replication on dual-region buckets
- Data Validation Tool after migration
- Pub/Sub Cloud Storage subscription archive
- Bigtable garbage collection by age
- Search indexes for log lookups
- Data Studio viewer's credentials
- Integer-range partitioning on an ID
- Approximate distinct counts for dashboards
- Scheduled queries for a single SQL job
- Pub/Sub message storage policy regions