GCP Cloud Digital Leader Practice Question

In Google Cloud, Google is accountable for securing the physical facilities, underlying hardware, and the managed service infrastructure, including automatic encryption of data at rest and in transit. Customers, however, retain responsibility for how their data is accessed. This means they must design and maintain Identity and Access Management (IAM) policies that grant the correct principals the minimum required permissions. Tasks such as patching BigQuery servers, providing physical security, or encrypting storage media are handled by Google and are therefore not the customer's responsibility.