GCP Professional Cloud Security Engineer Practice Question

Your security team enabled Object Versioning on a Cloud Storage bucket that receives daily exports of production customer data. Compliance rules allow only the current object version to remain accessible; any older, non-current versions must be automatically removed exactly seven days after they stop being live. Which single lifecycle rule configuration meets this requirement while minimizing accidental data loss?

Condition: NumberOfNewerVersions = 1; Action: Delete
Condition: IsLive = false and Age = 7 days; Action: Delete
Condition: IsLive = false and daysSinceNoncurrentTime = 7 days; Action: Delete
Condition: IsLive = true and daysSinceNoncurrentTime = 7 days; Action: Delete

Report Issue

Answer Description

When Object Versioning is enabled, each overwrite creates a new live version and marks the previous one as non-current. To delete only these obsolete versions seven days after they stop being live, the lifecycle rule must:

Target non-current versions (IsLive: false) so that the current data is never touched.
Use the daysSinceNoncurrentTime condition set to 7, which counts the days since the version became non-current (unlike Age, which counts from original creation).
Apply the Delete action to permanently remove the object version once the condition is met.

A rule that sets IsLive: true would delete the current version, Age = 7 would delete too early or late depending on overwrite frequency, and NumberOfNewerVersions alone imposes no time delay. Therefore the correct policy is: Condition → IsLive: false AND daysSinceNoncurrentTime: 7; Action → Delete.

Ask Bash

Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.