Cloud Digital Leader Trust and security with Google Cloud Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Google employees have unrestricted access to all customer data as part of the infrastructure service agreement.

  Why it's wrong here

  Google employees do not have unrestricted access to customer data. Access is granted on a least-privilege basis, requiring business justification, and is logged in Access Transparency, Google Cloud’s near-real-time log of personnel access. The Cloud Data Processing Addendum restricts Google from accessing customer data except to deliver the services or as instructed by the customer, and personnel with infrastructure roles are subject to background checks and security reviews. Thus, the claim of unrestricted access under an infrastructure service agreement is false.

• ✓

  Google commits that customer data is not accessed without authorization, with access logged via Access Transparency and governed by contractual data processing commitments.

  Why this is correct

  Google's contractual data processing commitments, including the Cloud Data Processing Addendum, state that Google will not access or use customer data without authorization, and will only do so for the purposes of providing the services. Access Transparency provides customers with near-real-time logs of all system access by Google Cloud personnel, including the reason for access. Combined with Access Approval, which lets customers approve or deny select access requests, these tools ensure data is accessed only as permitted. This makes the statement accurate and correct.

• ✗

  Google uses customer data to train its global AI models to improve services.

  Why it's wrong here

  Google contractually commits in its Cloud Data Processing Addendum that it will not use customer data to train AI models, build advertising profiles, or market to customers. Customer data is owned by the customer, and Google processes it only as a data processor under the customer's instructions. Unless a customer explicitly opts into a separate, clearly labeled data-sharing program, the vast majority of Google Cloud customer data is excluded from model training. The claim that Google automatically uses customer data to train its global AI models is therefore incorrect.

• ✗

  Customer data stored in Google Cloud is automatically accessible by government agencies on request.

  Why it's wrong here

  Government agencies cannot automatically access customer data stored in Google Cloud. Law enforcement and national security requests must be supported by appropriate legal process, such as a subpoena, court order, or warrant, and Google evaluates and often challenges overbroad requests. Google publishes a government transparency report detailing the number and scope of such requests, and customers may implement customer-managed encryption keys to further restrict access. Therefore, the data is not automatically accessible; legal and contractual safeguards apply.

Go deeper

Related to this question