Exam Professional Cloud Architect topic 1 question 125 discussion

Actual exam question from Google's Professional Cloud Architect

Question #: 125
Topic #: 1

[All Professional Cloud Architect Questions]

You are working at a financial institution that stores mortgage loan approval documents on Cloud Storage. Any change to these approval documents must be uploaded as a separate approval file, so you want to ensure that these documents cannot be deleted or overwritten for the next 5 years. What should you do?

A. Create a retention policy on the bucket for the duration of 5 years. Create a lock on the retention policy.
B. Create the bucket with uniform bucket-level access, and grant a service account the role of Object Writer. Use the service account to upload new files.
C. Use a customer-managed key for the encryption of the bucket. Rotate the key after 5 years.
D. Create the bucket with fine-grained access control, and grant a service account the role of Object Writer. Use the service account to upload new files.

Show Suggested Answer

Suggested Answer: A 🗳️

by Rom0817 at July 3, 2021, 12:23 p.m.

Comments

Submit Cancel

VishalB

Highly Voted 3 years, 9 months ago

Answer A o If a bucket has a retention policy, objects in the bucket can only be deleted or replaced once their age is greater than the retention period. o Once you lock a retention policy, you cannot remove it or reduce the retention period it has.

upvoted 31 times

...

azureaspirant

Highly Voted 3 years, 2 months ago

2/15/21 exam

upvoted 7 times

...

afsarkhan

Most Recent 9 months, 2 weeks ago

Selected Answer: A

A is correct because retention policy on bucket with lock , make sure no one can delete the object until it expires.

upvoted 1 times

...

[Removed]

1 year, 4 months ago

A https://cloud.google.com/storage/docs/bucket-lock#policy-locks

upvoted 1 times

...

examch

2 years, 3 months ago

Selected Answer: A

A is the correct answer, You can include a retention policy when creating a new bucket, or you can add a retention policy to an existing bucket. Placing a retention policy on a bucket ensures that all current and future objects in the bucket cannot be deleted or replaced until they reach the age you define in the retention policy. Attempts to delete or replace objects whose age is less than the retention period fail with a 403 - retentionPolicyNotMet error. https://cloud.google.com/storage/docs/bucket-lock#retention-policy

upvoted 5 times

...