GCP Cloud Digital Leader Practice Question

An organization is comparing security responsibilities for applications it runs on-premises versus in Google Cloud. Under Google Cloud's shared-responsibility model, which statement correctly describes a key difference between the two environments?

Customers must handle all network DDoS mitigation in Google Cloud, but such protection is automatically provided by on-premises infrastructure providers.
Google is responsible for data-center access control and hardware maintenance, whereas the customer must perform these tasks in its own on-premises facilities.
Google Cloud requires customers to patch guest operating systems, while on-premises vendors normally perform all OS patching for them.
Data at rest is not encrypted by default in Google Cloud, whereas most on-premises storage systems enforce encryption automatically.

Report Issue

Answer Description

Google Cloud customers automatically inherit Google's extensive physical-security controls: the company builds, owns, and secures its data-center facilities, servers, and networking equipment. Because of this, customers do not need to hire guards, install cameras, or handle hardware maintenance and disposal when their workloads run in Google Cloud. By contrast, an organization that operates its own on-premises data center must provide and manage all of those physical safeguards and replace or repair hardware itself. Tasks such as applying guest operating-system patches and deciding how to configure additional defenses (for example, custom Cloud Armor policies) remain customer responsibilities in Google Cloud just as they do on-premises, but baseline network-layer DDoS mitigation and default encryption of data at rest are services that Google provides automatically. Therefore, the distinguishing responsibility shift is that physical facility security and hardware upkeep move from the customer to Google when workloads migrate to Google Cloud.

Ask Bash

Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.