Medium1 markMultiple Choice
Subtask 2.2: Storage SystemsStorageCloud StorageComplianceBucket Lock
This question is part of a case study — click to read the full scenario(Case 11)

CASE STUDY: HealthData Inc

Overview:
Industry: Healthcare Analytics
Size: 1000 employees

Environment:

  • Co-located data center
  • Hadoop cluster
  • SFTP servers
  • 50 TB patient data

Requirements:

  • ML models for diagnostics
  • Secure data sharing portals
  • Break data silos

Exec Statements:

  • CEO: Need compute for ML.
  • CRO: HIPAA compliance is top priority.
  • CTO: Managed services needed to replace Hadoop.

Tech Reqs:

  • Strict HIPAA compliance
  • Automated PHI de-identification
  • Comprehensive audit logging
  • CMEK
  • Network isolation (no public internet)

Constraints:

  • US data sovereignty
  • 7-year retention (immutable)
  • Easy auditor access

QUESTION: To replace the on-premises Hadoop cluster with a managed service while minimizing migration effort, which GCP service should you recommend?

GCP PCA · Question 13 · Storage Systems

CASE STUDY: HealthData Inc

Overview:
Industry: Healthcare Analytics
Size: 1000 employees

Environment:

  • Co-located data center
  • Hadoop cluster
  • SFTP servers
  • 50 TB patient data

Requirements:

  • ML models for diagnostics
  • Secure data sharing portals
  • Break data silos

Exec Statements:

  • CEO: Need compute for ML.
  • CRO: HIPAA compliance is top priority.
  • CTO: Managed services needed to replace Hadoop.

Tech Reqs:

  • Strict HIPAA compliance
  • Automated PHI de-identification
  • Comprehensive audit logging
  • CMEK
  • Network isolation (no public internet)

Constraints:

  • US data sovereignty
  • 7-year retention (immutable)
  • Easy auditor access

QUESTION: To meet the 7-year immutable data retention requirement for patient records, how should you configure Cloud Storage?

Answer options:

A.

Enable Object Versioning and set a lifecycle rule to delete objects after 7 years.

B.

Apply a Bucket Lock with a retention policy of 7 years.

C.

Use Customer-Managed Encryption Keys (CMEK) and rotate the keys every 7 years.

D.

Store the data in the Archive storage class.

How to approach this question

Identify the Cloud Storage feature that enforces WORM (Write Once, Read Many) compliance.

Full Answer

B.Apply a Bucket Lock with a retention policy of 7 years.✓ Correct
Apply a Bucket Lock with a retention policy of 7 years.
Cloud Storage Bucket Lock allows you to enforce minimum retention periods for objects. Once a retention policy is locked, it cannot be reverted, and objects cannot be deleted or overwritten until their retention period (e.g., 7 years) expires. This is required for strict regulatory compliance.

Common mistakes

Choosing Object Versioning (A), which protects against accidental deletion but does not satisfy legal immutability requirements.

Practice the full GCP Professional Cloud Architect Practice Exam 6

50 questions · hints · full answers · grading

More questions from this exam