Courseiva
Trust and security with Google CloudmediumMultiple ChoiceObjective-mapped

Cloud Digital Leader Trust and security with Google Cloud Practice Question

Google's physical data center security includes multiple layers of protection. Which of the following is NOT a physical security measure Google uses at its data centers?

⚠ Common exam trap

The GCDL exam often tests the misconception that Google offers data center tours as a transparency measure, but in reality, Google relies on independent third-party audits and certifications rather than allowing physical access to customers.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Customers can schedule tours of Google data centers to verify security practices directly.

Google does not offer public tours of its data centers. Allowing customers to schedule tours would introduce unnecessary security risks and is not part of Google's physical security model. Instead, Google provides transparency through third-party audit reports and certifications (e.g., SOC 2, ISO 27001) to verify security practices.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Biometric authentication and badge access controls at multiple security perimeters.

    Why it's wrong here

    Biometric authentication, including iris and fingerprint scans, combined with electronic badge access at successive security perimeters is a real, documented layer of Google's defense-in-depth facility security. This multi-factor physical access control is genuinely deployed and is therefore not the correct answer when identifying a non-existent practice.

  • 24/7 on-site security personnel who monitor the facility continuously.

    Why it's wrong here

    Google operates security operations centers (SOCs) with trained personnel who monitor facility access, alarm systems, and video surveillance around the clock. This 24/7 on-site monitoring is a legitimate physical security control that is actively used, so it does not qualify as the incorrect practice the question is seeking.

  • Customers can schedule tours of Google data centers to verify security practices directly.

    Why this is correct

    Google does not offer customer-scheduled tours of its data centers; these facilities are highly restricted and access is limited to authorized personnel. Instead, Google provides independent third-party audit reports such as ISO 27001 and SOC 2 as verification of security controls. This statement is false as a physical security measure, making it the correct answer to a question asking which described practice does not actually exist.

  • Secure hardware destruction procedures for decommissioned storage devices.

    Why it's wrong here

    For decommissioned storage devices, Google employs approved data destruction methods such as degaussing, shredding, or certified erasure, with the process rigorously audited to ensure customer data is unrecoverable. This is a real physical security measure protecting data at end-of-life, and therefore it is not the correct answer.

About these practice questions

One of 829 original GCDL practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This GCDL practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the GCDL exam.