CASE STUDY: HealthData Corp
Overview: Healthcare SaaS managing 10PB of sensitive patient records and imaging.
Business: Strict HIPAA/SOC 2 compliance, ransomware protection, secure sharing of anonymized data with researchers, robust DR.
Executives:
How should you design the network security architecture to prevent data exfiltration, even if an employee's credentials are compromised?
GCP PCA · Question 15 · Domain 3: Designing for Security and Compliance
CASE STUDY: HealthData Corp
Overview: Healthcare SaaS managing 10PB of sensitive patient records and imaging.
Business: Strict HIPAA/SOC 2 compliance, ransomware protection, secure sharing of anonymized data with researchers, robust DR.
Executives:
To meet SOC 2 and HIPAA compliance, you must retain all administrative activity and data access logs for 3 years. How should you configure this?
Answer options:
Cloud Logging retains all logs for 3 years by default, so no action is needed.
Enable Data Access logs in Cloud Audit Logs, and create a Log Sink to route all audit logs to a BigQuery dataset with a 3-year retention policy.
Install the Ops Agent on all VMs to capture system logs and send them to Cloud Storage.
Export logs manually every 30 days to a local on-premises server.
50 questions · hints · full answers · grading
Expert