A multinational financial services enterprise is expanding its operations across both the United States and the European Union. The enterprise must deploy multiple cloud-based application environments that comply with strict regulatory frameworks, including US government compliance regimes (such as FedRAMP/CJIS) and EU data sovereignty regulations. The enterprise has the following technical and compliance requirements: Workload environments must automatically enforce data residency to geographically compliant cloud regions. Technical support cases and personnel access to operational telemetry must be restricted to qualified personnel within the respective geographic jurisdictions. Automated organizational policy constraints must prevent administrators from provisioning resources outside compliant boundaries. Which solution should you implement to satisfy these compliance and governance requirements?

Create Assured Workloads environments for the required US and EU compliance regimes, and deploy projects within their respective regulatory folders.: ### What Assured Workloads is **Assured Workloads** is a Google Cloud solution that enables enterprise customers to easily configure, deploy, and enforce security and compliance boundaries for regulated workloads without managing custom policy orchestration independently. ### How it meets the requirements - **Enforcing Data Residency**: Assured Workloads enforces pre-configured **Organization Policy constraints** (such as resource location restrictions) at the folder level, ensuring that storage, compute, and data analytics resources can only be deployed in designated geographic regions (e.g., specific US or EU regions). - **Personnel Access Restrictions**: Assured Workloads enforces sovereign and personnel controls that ensure technical support, access approvals, and platform maintenance requests are handled exclusively by verified personnel in the appropriate geographic jurisdiction (e.g., EU persons in EU locations for Sovereign Controls). - **Automated Guardrails**: When an Assured Workloads folder is created, it automatically applies compliance-specific organizational constraints across all nested projects to prevent configuration drift and block non-compliant resource provisioning. ### Key advantages and capabilities - **Pre-configured Compliance Regimes**: Out-of-the-box support for FedRAMP, CJIS, IL4, EU Regions, and Sovereign Controls. - **Continuous Compliance Monitoring**: Built-in compliance monitoring alerts administrators if policies or resources deviate from the required regulatory baseline. - **Integrated Encryption Controls**: Works seamlessly with **Cloud KMS** and customer-managed encryption keys (CMEK) to meet regulatory encryption standards. ### Why this is optimal Using Assured Workloads provides platform-enforced compliance baselines backed by contractual and technical guarantees for data residency and support personnel jurisdiction. Implementing this natively avoids fragile custom scripting and manual auditing.

StudyCerts

Assured Workloads Regulatory Compliance Governance 2 | Intrigued by the art of cloud architecture? Discover how to design, develop, and manage robust, secure, scalable, and dynamic solutions on Google Cloud as you prepare for the Professional Cloud Architect exam! | StudyCerts

Professional Cloud Architect

Intrigued by the art of cloud architecture? Discover how to design, develop, and manage robust, secure, scalable, and dynamic solutions on Google Cloud as you prepare for the Professional Cloud Architect exam!

Intermediate

Prepare and test your skills

Track Readiness

Set Exam Goal

Intermediate

Prepare and test your skills

Track Readiness

Set Exam Goal

Assured Workloads Regulatory Compliance Governance 2

Section: Business use cases and product strategy

Worked example. The correct answer is already marked and every option is explained below, so there is nothing to select here. To answer questions yourself, start the free trial.

A multinational financial services enterprise is expanding its operations across both the United States and the European Union. The enterprise must deploy multiple cloud-based application environments that comply with strict regulatory frameworks, including US government compliance regimes (such as FedRAMP/CJIS) and EU data sovereignty regulations.

The enterprise has the following technical and compliance requirements:

Workload environments must automatically enforce data residency to geographically compliant cloud regions.
Technical support cases and personnel access to operational telemetry must be restricted to qualified personnel within the respective geographic jurisdictions.
Automated organizational policy constraints must prevent administrators from provisioning resources outside compliant boundaries.

Which solution should you implement to satisfy these compliance and governance requirements?

Deploy standard Google Cloud projects and configure VPC Service Controls perimeters around all storage and compute resources in each region.

Implement Cloud Data Loss Prevention (Sensitive Data Protection) inspection templates to scan and relocate non-compliant data across standard folders.

Create Cloud Key Management Service (Cloud KMS) Customer-Managed Encryption Keys (CMEK) and apply IAM roles across custom Resource Manager folders.

Create Assured Workloads environments for the required US and EU compliance regimes, and deploy projects within their respective regulatory folders.

Professional Cloud Architect

Assured Workloads Regulatory Compliance Governance 2

Related questions