Crucial Exams

GCP Professional Cloud Security Engineer Practice Question

An EU-based healthcare provider is migrating a 100 TB PACS image archive to Google Cloud. GDPR and a national regulation require that

  1. all patient data remain within the EU at rest and during processing, and
  2. the encryption keys protecting that data must also stay in the same EU jurisdiction and be fully controlled by the customer. The analytics team occasionally launches GPU-accelerated jobs against the archive but wants to minimise operational overhead. Which Google Cloud configuration best satisfies these compliance constraints?

  • Create a Cloud Storage regional bucket in "europe-west3" (Frankfurt) protected by a customer-managed Cloud KMS key in the same region, and run GPU-enabled Compute Engine instances in "europe-west3" when analytics is required.

  • Provision a Filestore instance in "us-central1" encrypted with a CMEK key stored in "europe-west3", and launch GPU jobs in "europe-west1".

  • Create a dual-region Cloud Storage bucket "us-east4-northamerica-northeast1" protected by an external key manager located in Frankfurt, and process data on GPUs in "europe-west3".

  • Create a Cloud Storage multi-region bucket in "EU" using Google-managed encryption keys, and run GPU workloads on Compute Engine instances in "europe-west1" (Belgium).

GCP Professional Cloud Security Engineer
Supporting compliance requirements
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot