Answer-first summary for fast verification
Answer: Create a Sensitive Data Protection job. Specify the infoType of data to be detected and run the job across all Google Cloud Storage buckets., Activate Security Command Center Premium. Use compliance monitoring to detect resources that do not follow the applicable healthcare regulation.
The question requires detecting if Cloud Storage buckets outside the EU contain healthcare data (a type of PII). Option A is correct because Sensitive Data Protection (formerly DLP) is specifically designed to scan and detect sensitive data types like healthcare information across storage locations, allowing identification of buckets with PII outside the EU. Option C is also correct as Security Command Center Premium's compliance monitoring can detect resources violating regulations like GDPR or healthcare data laws by identifying buckets with sensitive data in non-compliant locations. Option B is incorrect as log sinks monitor resource locations but cannot detect the content (healthcare data) within buckets. Option D is incorrect as organization policies enforce location restrictions but do not detect existing violations or data content.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
Your EU-based organization stores Personally Identifiable Information (PII) and non-PII data in Cloud Storage buckets across multiple Google Cloud regions. To comply with EU data privacy laws mandating that PII must not be stored outside the EU, you need to detect if any Cloud Storage buckets outside the EU contain PII data. What should you do?
A
Create a Sensitive Data Protection job. Specify the infoType of data to be detected and run the job across all Google Cloud Storage buckets.
B
Create a log sink with a filter on resourceLocation.currentLocations. Trigger an alert if a log message appears with a non- EUcountry.
C
Activate Security Command Center Premium. Use compliance monitoring to detect resources that do not follow the applicable healthcare regulation.
D
Enforce the gcp.resourceLocations organization policy and add "EU" in a custom rule that only applies on resources with the tag "healthcare".
No comments yet.