Cloud Storage Lifecycle Retention Bucket Lock

Worked example. The correct answer is already marked and every option is explained below, so there is nothing to select here. To answer questions yourself, start the free trial.

A financial services organization ingests millions of analytical audit files daily into a Google Cloud Storage Standard bucket. Strict compliance regulations mandate that audit files must be retained immutably for exactly 7 years (2,555 days), preventing any user—including bucket and project administrators—from deleting or modifying them before the retention period expires.

To optimize storage costs, the team identified the following operational requirements:

Audit files larger than 10 MiB should automatically move from Standard to Coldline storage after 30 days of inactivity, avoiding transition costs on smaller files where operation fees exceed storage savings.
Files should be permanently purged automatically as soon as the 7-year compliance period lapses.

Which combination of Cloud Storage configurations satisfies all compliance and cost-optimization requirements?

Enable Object Versioning on the bucket. Configure an Object Lifecycle Management rule with the SetStorageClass action set to COLDLINE at age: 30, and a second rule with the Delete action and daysSinceNoncurrentTime: 2555.

Configure a bucket retention policy of 2,555 days and lock it using Bucket Lock. Define an Object Lifecycle Management rule with the SetStorageClass action set to COLDLINE with conditions age: 30, matchesStorageClass: STANDARD, and sizeAboveBytes: 10485760, and a second rule with the Delete action and condition age: 2555.

Configure an Object Hold on all incoming objects. Apply an Object Lifecycle Management rule with the SetStorageClass action set to COLDLINE with conditions age: 30 and matchesStorageClass: STANDARD, and configure an Organization Policy constraint to enforce bucket deletion after 2,555 days.

Apply an unlocked bucket retention policy of 2,555 days. Define an Object Lifecycle Management rule with the SetStorageClass action set to COLDLINE with conditions age: 30 and sizeBelowBytes: 10485760, and configure an external cron job on Cloud Run to delete expired objects.

Professional Cloud Data Engineer

Cloud Storage Lifecycle Retention Bucket Lock

Related questions