GCP Professional Cloud Architect Practice Question
A global fintech startup has just completed migrating its risk-analytics platform to Google Cloud. An external assessor now requires evidence that the underlying cloud infrastructure supporting the company's workloads complies with SOC 2 Type II controls for security, availability, and confidentiality. You have two weeks to provide the documentation and want to minimize engineering effort and disruption to the production environment. What should you do?
Enable Data Access audit logs in every project and export the logs to BigQuery so the assessor can review detailed activity records.
Download Google Cloud's latest SOC 2 Type II attestation report from the Compliance Reports Manager and provide it to the assessor.
Subscribe to Security Command Center Premium and generate an executive summary report of security findings across all projects.
Activate Assured Workloads in the production project and select the FedRAMP Moderate compliance regime to automatically satisfy SOC 2 requirements.
Google Cloud itself undergoes independent third-party audits for multiple frameworks, including SOC 2 Type II. Google makes the resulting attestation reports available to customers through the Compliance Reports Manager in the Google Cloud console (or through your account team). By downloading and sharing Google's SOC 2 Type II report, the company can demonstrate that the foundational cloud services it consumes meet the required Trust Services Criteria without having to build new monitoring or logging artifacts.
Enabling Data Access audit logs, deploying Security Command Center, or configuring Assured Workloads may improve the company's own security posture, but none of these steps deliver the independent third-party attestation the auditor is requesting, and they would add unnecessary work given the short deadline.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What are Trust Services Criteria in SOC 2 Type II compliance?
Open an interactive chat with Bash
What is the Compliance Reports Manager in Google Cloud?
Open an interactive chat with Bash
How does Google Cloud ensure SOC 2 Type II compliance for its services?
Open an interactive chat with Bash
What is SOC 2 Type II compliance?
Open an interactive chat with Bash
What is the Compliance Reports Manager in Google Cloud?
Open an interactive chat with Bash
How does Google Cloud undergo third-party audits?
Open an interactive chat with Bash
GCP Professional Cloud Architect
Designing for security and compliance
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99 $11.99
$11.99/mo
Billed monthly, Cancel any time.
$19.99 after promotion ends
3 Month Pass
$44.99 $26.99
$8.99/mo
One time purchase of $26.99, Does not auto-renew.
$44.99 after promotion ends
Save $18!
MOST POPULAR
Annual Pass
$119.99 $71.99
$5.99/mo
One time purchase of $71.99, Does not auto-renew.
$119.99 after promotion ends
Save $48!
BEST DEAL
Lifetime Pass
$189.99 $113.99
One time purchase, Good for life.
Save $76!
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .