GCP Regulatory Compliance & Legal Framework 5

Question 1

A company operating in multiple states must comply with various U.S. state privacy laws. Which state law is considered the most influential model for other state privacy legislation?

Accepted Answer

California Consumer Privacy Act (CCPA) and its CPRA amendment

Answer

The CCPA and its amendment, the CPRA, are the most influential U.S. state privacy laws, establishing many rights and obligations that other states have since modeled.

Question 2

Under SOC 2 compliance, which Trust Services Criteria category directly addresses whether a system's controls protect against unauthorized access?

Accepted Answer

Security (Common Criteria)

Answer

The Security (Common Criteria) category is the only mandatory TSC category in SOC 2 and directly covers protection of systems against unauthorized access, use, or disclosure.

Question 3

Which GCP feature enables organizations to restrict data residency so that covered data is stored and processed only within specific geographic regions?

Accepted Answer

Organization Policy constraints (resource location restriction)

Answer

Organization Policy constraints such as `gcp.resourceLocations` restrict where GCP resources can be created, helping organizations meet data residency and sovereignty requirements.

Question 4

Under GDPR, what is the legal term for transferring personal data from the EU to a country that the European Commission has deemed to have adequate privacy protections?

Accepted Answer

Adequacy decision transfer

Answer

An adequacy decision issued by the European Commission means personal data can flow freely to that third country without additional safeguards.

Question 5

A GCP customer wants to validate that their cloud environment meets CIS Benchmark recommendations. Which GCP tool provides automated assessment against CIS Benchmarks?

Accepted Answer

Security Command Center (Security Health Analytics)

Answer

Security Command Center's Security Health Analytics includes built-in detectors that assess GCP resources against CIS Benchmark controls and surface misconfigurations.

GCP Test Practice Test

GCP Test Practice Test

GCP Regulatory Compliance & Legal Framework 5