GCP Regulatory Compliance & Legal Framework 3

Question 1

An organization subject to FedRAMP requirements wants to host a government application on GCP. What must GCP demonstrate to be eligible?

Accepted Answer

FedRAMP Authorization

Answer

FedRAMP Authorization is the mandatory compliance program that cloud service providers must achieve before U.S. federal agencies can use their services.

Question 2

Under the Gramm-Leach-Bliley Act (GLBA), financial institutions must provide customers with a privacy notice describing their data-sharing practices. This is known as the:

Accepted Answer

Annual privacy notice

Answer

The GLBA Safeguards Rule requires financial institutions to send customers an annual privacy notice explaining what information is collected and how it is shared.

Question 3

Which GCP compliance offering specifically addresses requirements for U.S. Department of Defense workloads at Impact Levels 2 and 4?

Accepted Answer

DoD IL Authorization

Answer

GCP holds DoD Impact Level authorizations (IL2, IL4, IL5) for workloads that meet Department of Defense cloud security requirements at varying sensitivity levels.

Question 4

A GDPR Data Protection Impact Assessment (DPIA) is mandatory when processing is likely to result in:

Accepted Answer

A high risk to the rights and freedoms of individuals

Answer

Under GDPR Article 35, a DPIA is required when processing operations are likely to result in a high risk to the rights and freedoms of natural persons.

Question 5

The California Consumer Privacy Act (CCPA) grants California residents the right to know what personal information is collected and the right to:

Accepted Answer

Request deletion and opt out of its sale

Answer

CCPA gives consumers the right to know, the right to delete, and the right to opt out of the sale of their personal information to third parties.

GCP Test Practice Test

GCP Test Practice Test

GCP Regulatory Compliance & Legal Framework 3