hardMultiple Choice
Generative AI Leader Practice Question: A regulated healthcare organization needs to use…
A regulated healthcare organization needs to use Google Cloud AI services for processing protected health information (PHI). They require a signed Business Associate Agreement (BAA) and HIPAA compliance. Which service provides these assurances?
⚠ Common exam trap
Watch out — candidates often assume the Gemini API alone is HIPAA-compliant because it is a Google service, but in reality, only when accessed through Vertex AI (which provides the BAA and enterprise controls) does it meet healthcare regulatory requirements.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Vertex AI
Vertex AI is the correct choice because it is the only Google Cloud AI service that offers a signed Business Associate Agreement (BAA) and is explicitly covered under Google Cloud's HIPAA compliance framework. This allows regulated healthcare organizations to process protected health information (PHI) with the necessary contractual and security assurances.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Google AI Studio
Why it's wrong here
Google AI Studio is a developer prototyping environment and is not covered by a Google Cloud BAA for PHI processing. It is tempting because it offers quick access to Gemini models, but HIPAA-compliant workloads require a BAA-eligible service such as Vertex AI.
- ✗
Colab Enterprise
Why it's wrong here
Colab Enterprise is a managed notebook environment for building and running ML workflows; it does not carry a signed BAA covering PHI processing, so it fails the HIPAA requirement. It would suit exploratory model development, where no protected health data or contractual compliance assurance is involved.
- ✗
Gemini API directly
Why it's wrong here
The Gemini API consumed directly does not carry a Google Cloud BAA covering PHI, so HIPAA assurances are absent. It is tempting because Gemini powers generative features, but the correct choice is a service explicitly listed as HIPAA-covered and BAA-eligible, such as Vertex AI.
- ✓
Vertex AI
Why this is correct
Vertex AI is covered by Google Cloud's HIPAA BAA, permitting protected health information processing under a signed agreement. This satisfies the healthcare organisation's requirement for both a BAA and HIPAA-compliant infrastructure for its AI workloads.
Go deeper
Related to this question
About these practice questions
One of 1,008 original Generative AI Leader practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This Generative AI Leader practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the Generative AI Leader exam.