Exam Cloud Digital Leader topic 1 question 90 discussion

C seems to be correct as data security is responsible for both cloud vendor and customer

Create an incident plan to mitigate impacts

C IS CORRECT

C is correct

C. Create an incident plan to mitigate impacts Even though Google Cloud provides a secure platform, it is still important for organizations to have an incident plan in place in case of a data breach.

B is correct

By creating an incident plan, you can help to protect your organization from the impacts of a data breach. The other options are not as relevant to this scenario. Option A, reducing reliance on multi-factor authentication, is not a good idea. Multi-factor authentication is an important security measure that can help to prevent unauthorized access to your data. Option B, data security is Google's responsibility, so preparation is minimal, is not correct. Google Cloud provides a secure platform, but it is still important for organizations to take steps to protect their data. Option D, strengthening their data center perimeter security, is a good step, but it is not the only thing that organizations need to do to prepare for data breaches.

It's important to note that data breaches can never be completely eliminated, but by implementing strong security measures and following best practices, an organization can significantly reduce the risk and impact of a data breach in their Google Cloud infrastructure. Create an incident response plan that outlines the steps to be taken in the event of a data breach. This should include procedures for containing the breach, assessing the impact, notifying affected parties, and initiating recovery processes.

Shared responsibility

bhai tum kar kya rahe ho

B says, minimal preparation that means, so least preparation is definitely needed on the customer end but majority of it will be handled by cloud provider.

I think the answer will be Option C. If google completely take care of security then why google will provide custom encryption key option instead of google's default one. If the custom key which we had provided may be easy to hack then we can't blame GCP regarding this. So it must be C as per my opinion

C. Create an incident plan to mitigate impacts. Additionally, they should also consider implementing security best practices such as multi-factor authentication, regular security audits and assessments, and monitoring for unusual activity on their systems.

Google is fully responsible for hardware maintenance, so it must be C.

Shared responsibility

C. Create an incident plan to mitigate impacts

option C is the correct answer, since it is a shared responsibilty