GCP Professional Cloud Security Engineer Practice Question

Using Cloud Storage in the "europe-west3" (Frankfurt) region guarantees that stored objects never leave the EU, whereas a multi-region such as "EU" still meets data-residency needs but would scatter replicas across several EU countries and provide no single-region locality for tightly coupled GPU workloads. Enabling CMEK with a Cloud KMS key ring that is also in "europe-west3" keeps the cryptographic keys inside the same jurisdiction and under the customer's control. Compute Engine VMs with attached NVIDIA GPUs launched in the same region ensure that temporary processing stays inside the EU and avoids cross-region egress. Filestore in the US or any configuration in a non-EU region would violate data-sovereignty rules, and relying on Google-managed encryption keys does not allow the customer to guarantee where keys are stored or who can access them.