Question 294 of 318
Single answerYour organization operates in a highly regulated industry and uses multiple Google Cloud services. You need to identify potential risks to regulatory compliance. Which situation introduces the greatest risk?
AThe security team mandates the use of customer-managed encryption keys (CMEK) for all data classified as sensitive.
BSensitive data is stored in a Cloud Storage bucket with the uniform bucket-level access setting enabled.
CThe audit team needs access to Cloud Audit Logs related to managed services like BigQuery.
✓DPrincipals have broad IAM roles allowing the creation and management of Compute Engine VMs without a pre-defined hardening process.
✓
Correct Answer: D
Principals have broad IAM roles allowing the creation and management of Compute Engine VMs without a pre-defined hardening process.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.