Chapter 5 of 5 · Google Cloud Professional Cloud Security Engineer
Supporting compliance requirements
Shared responsibility, scope, Assured Workloads, Access Approval and residency.
- 2topics
- 10 minfast track
- 11%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
- 1Shared Responsibility, Compliance Scope and Control MappingApply the shared responsibility model on Google Cloud, set the compliance scope, find technical needs and map regulations to…5 min
- 2Assured Workloads, Access Transparency, Access Approval and ResidencyConfigure Assured Workloads, organization policies, Access Transparency, Access Approval and data regionalization for compliance…5 min
About this chapter
What this chapter covers
Supporting compliance requirements is about 11% of the Google Cloud Professional Cloud Security Engineer exam. It covers how a security engineer turns regulations and industry standards into concrete Google Cloud designs and evidence.
It covers responsibilities and scope (technical needs for compute, data, network and storage, the shared responsibility model, the environment in scope and mapping requirements to controls) and compliance controls (Assured Workloads, organization policies, Access Transparency, Access Approval and regionalization of data and services).
The exam has 50 to 60 multiple choice and multiple select questions in 2 hours. Questions here usually name a regulation or a customer demand, such as data residency or approval of Google support access, and ask for the matching control.
How the topics fit together
Compliance builds on the earlier chapters: most of the controls it maps to, such as IAM, perimeters, keys and audit logs, were covered there. This chapter adds the controls over Google's own access and over data location.
Access Transparency shows Google access after it happens; Access Approval requires your approval before it happens. The exam tests this difference often.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with tables and code examples.
- What to remember for the exam: the facts to memorise and how questions are phrased.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Ready for more practice?
The full Google Cloud Professional Cloud Security Engineer question bank has 749 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by Google Cloud. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.