Google Cloud Professional Cloud Security Engineer Practice Exam

Which actions are necessary to meet a seven-year data retention policy in Cloud Storage?

1. Identify buckets, apply a retention policy, enable bucket lock.

2. Delete all non-compliant buckets, archive data regularly.

3. Utilize manual backups and configure a firewall.

4. Regularly audit data access permissions.

The correct answer is: Identify buckets, apply a retention policy, enable bucket lock.

To meet a seven-year data retention policy in Cloud Storage, it is essential to define the lifecycle of how long data should be retained before it is eligible for deletion. The first step is to identify the specific storage buckets that will contain the data under this retention policy. Once identified, applying a retention policy is crucial as it enforces the time duration that data must be preserved, in this case, seven years. Enabling bucket lock is a critical action that further secures the retention policy. Bucket lock prevents the deletion of data until the specified retention period ends, enhancing compliance with the data retention requirements. This feature ensures that data cannot be inadvertently or maliciously deleted, thus protecting the integrity of the data as mandated by the policy. The combination of these actions—identifying the relevant buckets, applying the retention policy, and enabling bucket lock—ensures that the data remains accessible and compliant throughout the mandated period of seven years. Other options do not properly address the requirements for establishing and enforcing a data retention policy in a structured and compliant manner.