Generative AI Leader Google Cloud's Generative AI Offerings Practice Question
A bank is piloting a Gemini-powered assistant that summarizes internal audit reports. Compliance requires that prompts and responses never leave the company's chosen Google Cloud region, that customer-managed encryption keys protect data at rest, and that no data is used to improve Google's models. Which combination of Vertex AI capabilities should the team configure to meet these requirements?
⚠ Common exam trap
The trap here is treating VPC Service Controls or prompt instructions as substitutes for data residency configuration and model training guarantees, which they are not.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Vertex AI with data residency controls, CMEK through Cloud KMS, and the documented data governance guarantee that customer data is not used to train Google's foundation models.
Meeting all three compliance constraints requires regional processing for residency, Cloud KMS customer-managed keys for encryption at rest, and reliance on Vertex AI's data governance commitments that customer data is not used to train Google's foundation models. Network or prompt-level controls cannot substitute for these platform-level guarantees.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Vertex AI with CMEK enabled and a VPC Service Controls perimeter, relying on the perimeter to guarantee regional data processing.
Why it's wrong here
CMEK addresses encryption at rest, and VPC Service Controls reduce data exfiltration risk, but a service perimeter does not by itself guarantee that model processing stays in a specific region. Data residency must be configured through the appropriate regional endpoint and storage settings, so this combination leaves the residency requirement unmet.
- ✗
Vertex AI with a global endpoint, default Google-managed encryption keys, and a prompt instruction telling the model not to retain any input.
Why it's wrong here
A global endpoint may route requests outside the chosen region, violating residency, and default Google-managed keys do not meet the customer-managed key requirement. A prompt instruction has no bearing on retention or training policies, because those are platform-level governance controls, not model behaviors that can be requested in natural language.
- ✗
Gemini accessed through AI Studio with billing enabled, plus a Cloud Armor policy restricting access to the bank's IP ranges.
Why it's wrong here
AI Studio is aimed at prototyping and does not provide the enterprise data residency, CMEK, and governance controls the bank needs for audit data. Cloud Armor filters network traffic but does nothing for encryption at rest, regional processing, or model training guarantees, so it cannot satisfy any of the three compliance requirements in this scenario.
- ✓
Vertex AI with data residency controls, CMEK through Cloud KMS, and the documented data governance guarantee that customer data is not used to train Google's foundation models.
Why this is correct
Vertex AI supports selecting a region for processing and storage, integrates with Cloud KMS so customer-managed encryption keys protect data at rest, and its terms state that customer data is not used to improve Google's foundation models. Together these three controls directly satisfy the residency, encryption, and no-training requirements the bank's compliance team imposed.
Go deeper
Related to this question
About these practice questions
Courseiva writes every Generative AI Leader question from scratch — 1,008 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Google Cloud exam blueprint
This Generative AI Leader practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the Generative AI Leader exam.