PCSE Ensuring Data Protection Practice Question
A company needs to enforce data residency in the European Union for all GCP resources. Which TWO actions should they take? (Choose two.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use Assured Workloads with an EU data boundary
To enforce EU data residency, an organization policy constraint `gcp.resourceLocations` can restrict allowed locations to EU regions. Additionally, Assured Workloads can provide regulatory compliance for EU data boundary. VPC Service Controls prevent data exfiltration but do not enforce residency. Audit Logs and IAM do not restrict locations.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Create a VPC Service Perimeter that only allows access from EU regions
Why it's wrong here
Service perimeters control data access, not resource creation locations.
- ✓
Use Assured Workloads with an EU data boundary
Why this is correct
Assured Workloads provides compliance controls including data residency in the EU.
- ✓
Configure the organization policy constraint `gcp.resourceLocations` to allow only EU regions
Why this is correct
This restricts resource creation to EU regions.
- ✗
Set IAM policies to deny access to non-EU regions
Why it's wrong here
IAM policies control access, not resource location.
- ✗
Enable Cloud Audit Logs to monitor resource creation outside EU
Why it's wrong here
Audit logs only monitor, not enforce.
Go deeper
Related to this question
About these practice questions
One of 960 original PCSE practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCSE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCSE exam.