SECURITY BY GCP

What does data sovereignty refer to?

• The physical location where data is stored or processed

• The concept that data is subject to the laws and regulations of the country where it is located

• The compliance reports manager at Google Cloud

• The tools offered by Google Cloud for data protection

Which regulation in the European Union requires companies to follow rules when handling personal data of EU citizens?

• ISO/IEC certificates

• General Data Protection Regulation (GDPR)

• VPC service controls

• SOC reports

What is the purpose of region selection in Google Cloud?

• To prevent unauthorized access by Google employees

• To ensure data stays in the selected region

• To provide detailed information on certifications, standards, and compliance controls

• To offer easy access to important compliance documents

What does Google Cloud offer to prevent accidental data storage in the wrong region?

• VPC service controls

• Organization policy constraints

• ISO/IEC certificates

• Compliance reports manager

What is the main purpose of the Compliance Reports Manager at Google Cloud?

• To offer easy access to important compliance documents

• To ensure data remains under the jurisdiction of local laws

• To prevent unauthorized access by Google employees

• To restrict access to data based on specific rules

What principle ensures that users have control over their data within Google Cloud?

• Guarding Against Insider Access

• You Own Your Data

• No Selling of Customer Data

• Encryption by Default

What feature of Google Cloud ensures that data is automatically encrypted for protection?

• Guarding Against Insider Access

• You Own Your Data

• No Selling of Customer Data

• Encryption by Default

What does the Compliance Resource Centre at Google Cloud provide?

• Tools for Control

• Additional Protection

• Region Selection

• Detailed information on certifications, standards, and compliance controls

What is the purpose of the Trust Principles at Google Cloud?

• To provide transparency and accountability

• To ensure data remains under the jurisdiction of local laws

• To restrict access to data based on specific rules

• To prevent unauthorized access by Google employees

What does the GDPR in the European Union require companies to follow?

• Tools like organization policy constraints and IAM configuration

• Certifications, standards, and compliance controls

• Rules when handling personal data of EU citizens

• Features like VPC service controls and Google Cloud Armor