Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 289

Question

You work for an organization that handles sensitive customer data. You must secure a series of Google Cloud Storage buckets housing this data and meet these requirements: • Multiple teams need varying access levels (some read-only, some read-write). • Data must be protected in storage and at rest. • It's critical to track file changes and audit access for compliance purposes. • For compliance purposes, the organization must have control over the encryption keys. What should you do?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Use predefined IAM roles tailored to each team's access needs, such as Storage Object Viewer and Storage Object User. Utilize customer-supplied encryption keys (CSEK) and enforce TLS encryption. Turn on both Object Ve... Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources. Cloud Audit Logs record administrative and data-access activity for auditing and governance.

Google Cloud Professional Cloud Security Engineer PCSE — Question 289