GCP Professional Standards & Ethics 2

Question 1

Under GDPR, what is the maximum fine for the most serious violations?

Accepted Answer

4% of annual global turnover or €20 million

Answer

GDPR's highest tier penalty is 4% of annual global turnover or €20 million, whichever is greater.

Question 2

Which GCP service is specifically designed to help organizations meet HIPAA compliance for health data workloads?

Accepted Answer

Cloud Healthcare API with a signed Business Associate Agreement

Answer

Cloud Healthcare API supports HIPAA workloads when paired with a signed BAA from Google.

Question 3

What does the principle of data minimization require?

Accepted Answer

Collecting only the data necessary for the specified, legitimate purpose

Answer

Data minimization means limiting personal data collection to what is strictly necessary for the stated purpose.

Question 4

A cloud professional discovers customer PII is stored in unencrypted application logs. What should they do first?

Accepted Answer

Report it through proper incident response channels and preserve evidence

Answer

Discovered PII exposure must be escalated through incident response procedures immediately, not ignored or unilaterally deleted.

Question 5

What does the GDPR 'right to erasure' (right to be forgotten) require of data processors?

Accepted Answer

Erasing an individual's personal data upon valid request when legal conditions are met

Answer

The right to erasure obligates processors to delete personal data when the individual requests it and no overriding legal basis exists.

GCP Test Practice Test