Question 13 of 960
hardMultiple SelectObjective-mapped
Enforcing Data Retention and Immutability in Cloud Storage
A company is implementing a data retention policy for Cloud Storage buckets. They need to ensure that objects cannot be deleted before a specified retention period. Which THREE features can they use? (Choose THREE.)
Quick Answer
The answer is a Retention Policy combined with Object Holds and Retention Policy settings on the bucket itself. A Retention Policy enforces a minimum retention period for all objects in the bucket, preventing deletion or overwrite until that period expires, while Object Holds (either event-based or temporary) allow you to lock individual objects indefinitely or for a specific duration, adding granular control. On the Google Professional Cloud Security Engineer exam, this question tests your understanding of data immutability and compliance controls, often appearing as a multi-select scenario where you must distinguish between bucket-level policies and object-level locks. A common trap is confusing retention policies with lifecycle rules, which manage deletion but do not enforce immutability. Remember: Retention Policies are the bucket’s “minimum age” lock, while Object Holds are the “do not touch” flag for specific files. Memory tip: Think of the Retention Policy as a vault door that won’t open until the timer runs out, and Object Holds as individual padlocks on items inside that vault.
⚠ Common exam trap
Google Cloud often tests the distinction between features that prevent deletion (Retention Policy, Bucket Lock, Object holds) versus features that manage deletion (Lifecycle rules) or provide recovery after deletion (Object versioning), leading candidates to confuse lifecycle rules with retention controls.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Retention Policy on the bucket.
A is correct because a Retention Policy on a Cloud Storage bucket enforces a minimum retention period for all objects in the bucket. Once set, objects cannot be deleted or overwritten until the retention period expires, directly meeting the requirement to prevent deletion before a specified time.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Retention Policy on the bucket.
Why this is correct
Retention policies prevent deletion before the retention period ends.
- ✗
Lifecycle rules with a Delete action.
Why it's wrong here
Lifecycle rules delete objects, not prevent deletion.
- ✓
Bucket Lock feature.
Why this is correct
Bucket Lock locks the retention policy, making it immutable.
- ✓
Object holds (event-based or temporary).
Why this is correct
Holds prevent deletion of objects.
- ✗
Object versioning.
Why it's wrong here
Versioning keeps multiple versions but does not prevent deletion.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on PCSE
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. An organization is configuring a Cloud Storage bucket for a regulated workload. The bucket configuration shown in the exhibit was applied. Which compliance requirement is this configuration primarily designed to address?
hard- ✓ A.Data retention and immutability.
- B.Encryption at rest using customer-managed encryption keys (CMEK).
- C.Access transparency for data access.
- D.Data residency within a specific geographic region.
Why A: The bucket configuration includes object versioning enabled and a retention policy with a retention period. This combination ensures that objects cannot be deleted or overwritten before the retention period expires, addressing data retention and immutability requirements. This is a common compliance need for regulated workloads where data must be preserved in its original state for a defined duration.
Last reviewed: Jun 30, 2026
This PCSE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCSE exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.