GCP Cloud Digital Leader Practice Question

In the shared responsibility model, Google Cloud secures the underlying infrastructure, including data-center facilities, hardware, network, and hypervisors, and automatically encrypts data at rest on its storage media. Customers, however, must decide who can use their resources and what those users are permitted to do. Creating and maintaining Identity and Access Management (IAM) roles and policies is therefore a customer obligation. Google, not the customer, handles host OS patching and the physical protection of data-center buildings, and it applies default encryption to stored data.