mediumMultiple Choice
Generative AI Leader Practice Question: A multinational corporation wants to deploy a…
A multinational corporation wants to deploy a generative AI chatbot for its global customer service. They must ensure that data residency requirements are met for EU customers, meaning all prompts and responses from EU users must be processed and stored within the European Union. Which Google Cloud capability should they use?
⚠ Common exam trap
Candidates often confuse network-level controls (like Cloud Armor or VPC Service Controls) with data residency controls, mistakenly thinking blocking traffic or creating perimeters ensures data stays in a region, when only explicit regional configuration in the AI service itself guarantees processing and storage location.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure data residency controls in Vertex AI to process and store data in a specific region
Vertex AI allows you to configure data residency controls that ensure prompts and responses are processed and stored within a specific geographic region, such as the European Union. This directly meets the requirement for EU customer data to remain within EU boundaries, as it leverages Google Cloud's regionalization capabilities for AI workloads.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Implement Cloud Armor to block non-EU traffic
Why it's wrong here
Cloud Armor filters HTTP traffic at the load balancer, blocking or allowing requests by IP, geography or rules; it cannot guarantee that EU users' prompts and responses are processed and stored inside the EU. It is tempting as a geo-fencing control, but residency concerns data location, not request admission.
- ✗
Use Cloud Data Loss Prevention (DLP) to mask EU data
Why it's wrong here
Cloud DLP detects and masks sensitive data such as personally identifiable information in transit or at rest; masking alters content but does not constrain where prompts and responses are processed or stored. It is tempting because it addresses data privacy, yet residency requires regional placement of compute and storage, not redaction.
- ✗
Enable VPC Service Controls to restrict data flow
Why it's wrong here
VPC Service Controls build a perimeter around Google Cloud services to prevent data exfiltration across boundaries; they restrict access rather than pinning processing and storage to an EU region. They are tempting as a data-governance control, but residency demands regional processing and storage, satisfied by configuring EU-based locations for the model and data.
- ✓
Configure data residency controls in Vertex AI to process and store data in a specific region
Why this is correct
Vertex AI data residency controls pin processing and storage to a chosen region, so EU prompts and responses never leave the European Union. This directly satisfies the stem's residency constraint, unlike global endpoints or generic encryption settings.
Go deeper
Related to this question
About these practice questions
One of 1,008 original Generative AI Leader practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This Generative AI Leader practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the Generative AI Leader exam.