Professional Cloud DevOps Engineer
Prepare and test your skills
Prepare and test your skills
Worked example. The correct answer is already marked and every option is explained below, so there is nothing to select here. To answer questions yourself, start the free trial.
A DevOps team at a regulated financial institution is architecting a data platform on Google Cloud that must comply with strict data residency regulations in Germany. The compliance rules mandate that all data at rest—including database records, object storage, analytical datasets, and cryptographic keys—must remain exclusively within Germany (europe-west3). Additionally, the relational database must maintain automated failover capabilities for business continuity without transferring data across country borders.
Which architecture meets all regulatory compliance, data residency, and high-availability requirements?
This architecture combines Google Cloud Resource Location Restriction organization policies with regional resource placement, in-region high availability, and localized Customer-Managed Encryption Keys (CMEK) via Cloud Key Management Service (Cloud KMS). It strictly aligns the resource hierarchy, data plane, and cryptographic key boundary within a single regulatory jurisdiction (europe-west3).
StudyCerts
StudyCertsconstraints/gcp.resourceLocations constraint restricted to europe-west3 ensures that no project within the resource hierarchy folder can provision services or compute outside of Germany.europe-west3 guarantees that object data and analytical tables remain strictly within the sovereign boundary.europe-west3-a and europe-west3-b) within the same region. This delivers automated sub-minute failover without transferring data across geographic borders.europe-west3 enforces localized cryptographic protection.Unlike dual-regional or multi-regional configurations that replicate data across multiple nations or geographic zones, a purely regional approach coupled with zonal high availability fulfills all uptime requirements without violating national data sovereignty laws.
Keep the momentum going with these hand-picked practice scenarios
Want more questions like this?
Get a free certification question every week.