QuestionQ92

Designing for security and compliance

Your company operates nationwide and intends to use GCP for several batch workloads, including some that are not time-critical. You must also use HIPAA-certified GCP services and manage service costs.

How should you design the solution to follow Google best practices?

  • A Provision preemptible VMs to reduce cost. Discontinue use of all GCP services and APIs that are not HIPAA-compliant.
  • B Provision preemptible VMs to reduce cost. Disable and then discontinue use of all GCP services and APIs that are not HIPAA-compliant.
  • C Provision standard VMs in the same region to reduce cost. Discontinue use of all GCP services and APIs that are not HIPAA-compliant.
  • D Provision standard VMs to the same region to reduce cost. Disable and then discontinue use of all GCP services and APIs that are not HIPAA-compliant.
Explanation

Preemptible VMs provide substantially lower-cost compute and are appropriate for fault-tolerant, interruptible batch workloads. For HIPAA workloads involving PHI, Google Cloud instructs customers to disable or otherwise ensure they do not use products that are not explicitly covered by the Business Associate Agreement; disabling and discontinuing such services meets that control.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!