Exam Professional Cloud Database Engineer topic 1 question 19 discussion

Actual exam question from Google's Professional Cloud Database Engineer

Question #: 19
Topic #: 1

[All Professional Cloud Database Engineer Questions]

You are evaluating Cloud SQL for PostgreSQL as a possible destination for your on-premises PostgreSQL instances. Geography is becoming increasingly relevant to customer privacy worldwide. Your solution must support data residency requirements and include a strategy to: configure where data is stored control where the encryption keys are stored govern the access to data
What should you do?

A. Replicate Cloud SQL databases across different zones.
B. Create a Cloud SQL for PostgreSQL instance on Google Cloud for the data that does not need to adhere to data residency requirements. Keep the data that must adhere to data residency requirements on-premises. Make application changes to support both databases.
C. Allow application access to data only if the users are in the same region as the Google Cloud region for the Cloud SQL for PostgreSQL database.
D. Use features like customer-managed encryption keys (CMEK), VPC Service Controls, and Identity and Access Management (IAM) policies.

Show Suggested Answer

Suggested Answer: D 🗳️

by range9005 at Dec. 21, 2022, 2:13 p.m.

Comments

Submit Cancel

juliorevk

10 months ago

D because CMEK where the encryption keys are stored IAM govern the access to data VPC Service Controls configure where data is stored control

upvoted 4 times

...

theseawillclaim

10 months, 1 week ago

Selected Answer: D

D. C might seem ok, but you'd need some kind of tracking to localize users, and there is no mention of it.

upvoted 1 times

...

standm

1 year, 2 months ago

should be CSEK and not CMEK. Then 'D'.

upvoted 1 times

...

dynamic_dba

1 year, 4 months ago

D. Using IAM policies, VPC Service Controls and CMEK is the best answer. A doesn’t make sense since Geography would be a factor at the Region level, not zone level. B is a lot of work and GCP is all about making things easier. C address part of the issue, but D addresses more. The link provided by sp57 is spot on.

upvoted 1 times

...