
Answer-first summary for fast verification
Answer: Create a retention policy on the bucket for the duration of 5 years. Create a lock on the retention policy.
The correct answer is A. Creating a retention policy on the bucket for the duration of 5 years and creating a lock on the retention policy ensures that the documents cannot be deleted or overwritten for the specified period. A retention policy sets a duration for which an object in the bucket must be retained, and locking the policy makes it immutable, guaranteeing that the policy cannot be altered or removed until the retention period expires. This approach aligns perfectly with the requirement to protect mortgage loan approval documents for the next 5 years.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
As a cloud architect at a financial institution, you are responsible for securely storing mortgage loan approval documents on Google Cloud Storage. The institution's policy mandates that any updates to these approval documents must be saved as new, separate files rather than modifying the existing ones. You are tasked with configuring the storage in such a way that no document can be deleted or overwritten for the next 5 years. What steps should you take to fulfill this requirement?
A
Create a retention policy on the bucket for the duration of 5 years. Create a lock on the retention policy.
B
Create a retention policy organizational constraint constraints/storage.retentionPolicySeconds at the organization level. Set the duration to 5 years.
C
Use a customer-managed key for the encryption of the bucket. Rotate the key after 5 years.
D
Create a retention policy organizational constraint constraints/storage.retentionPolicySeconds at the project level. Set the duration to 5 years.
No comments yet.