Professional Cloud Security EngineerDemo

By Google · Question Mode

QuestionQ133

Supporting compliance requirements

Your organization, which is based in the EU, stores both Personally Identifiable Information (PII) and non-PII data in Cloud Storage buckets in multiple Google Cloud regions. EU data-privacy laws require that PII data not be stored outside the EU. To help satisfy this compliance requirement, you need to detect whether Cloud Storage buckets outside the EU contain healthcare data. What should you do?

  • A Create a Sensitive Data Protection job. Specify the infoType of data to be detected and run the job across all Google Cloud Storage buckets.
  • B Create a log sink with a filter on resourceLocation.currentLocations. Trigger an alert if a log message appears with a non- EUcountry.
  • C Activate Security Command Center Premium. Use compliance monitoring to detect resources that do not follow the applicable healthcare regulation.
  • D Enforce the gcp.resourceLocations organization policy and add "EU" in a custom rule that only applies on resources with the tag "healthcare".
Explanation

Sensitive Data Protection inspection jobs scan Cloud Storage locations for configured infoTypes and return findings for the sensitive data detected. Configuring a job with the appropriate healthcare-related infoType and running it across the Cloud Storage buckets identifies healthcare data in buckets outside the EU.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!