Google Cloud Professional Cloud Security Engineer Practice Exam

Which method helps ensure compliance with GDPR in Google Cloud by limiting where resources are physically located?

1. Implement an organization policy constraint

2. Use Cloud Identity for authentication

3. Utilize multi-factor authentication

4. Enable network security policies

The correct answer is: Implement an organization policy constraint

Implementing an organization policy constraint is key to ensuring compliance with GDPR by controlling where resources are physically located within Google Cloud. This method allows organizations to specify geographic restrictions for resource deployment, ensuring that sensitive data and workloads are managed within the jurisdictions required by data protection regulations such as GDPR. By setting constraints on resource location, organizations can maintain compliance with legal requirements regarding data residency and safeguard the personal information of EU citizens. On the other hand, while using Cloud Identity for authentication, utilizing multi-factor authentication, and enabling network security policies contribute to a broader security posture, they do not directly address the crucial aspect of data location compliance required by GDPR. These options focus more on securing access and protecting data in transit or at rest, rather than controlling the geographical aspects of where data can reside.