Examkin

Question

Difficulty: MediumManaging Storage and Database Solutions

A Cloud Engineer must configure a Google Cloud Storage bucket storing audit logs to adhere to regulatory compliance standards. The policy mandates that objects must be protected against deletion or modification for three years, and storage costs for logs older than 90 days must be optimized automatically while retaining accessibility. Which TWO actions should the engineer execute to achieve these operational requirements?

  1. Configure a Retention Policy with a locked duration of three years on the Cloud Storage bucket.Answer
  2. Create an Object Lifecycle Management rule with an action to transition objects to Coldline or Archive storage after 90 days from creation.Answer
  3. C
    Apply custom per-object Access Control Lists (ACLs) to revoke delete permissions for all users while Uniform Bucket-Level Access is enforced.
  4. D
    Set the default storage class of the bucket directly to Archive Storage immediately upon bucket deployment while active logs are queried daily.

Answer

The correct actions are to set a locked Bucket Retention Policy for three years and to create an Object Lifecycle Management rule transitioning objects to Coldline or Archive storage after 90 days.
Locking a Bucket Retention Policy enforces immutability and prevents data deletion for the mandated three-year period. Additionally, using Object Lifecycle Management rules automatically shifts objects older than 90 days to colder storage classes (such as Coldline or Archive), meeting cost optimization goals without manual intervention.

Step-by-Step Solution

1
Enforce immutability requirements
Configuring a bucket retention policy prevents any object deletion or overwrites for the mandatory 3-year period. Locking the policy ensures even bucket administrators cannot lower or remove the restriction.
Regulatory compliance demands immutable log retention.
2
Implement automated storage lifecycle tiering
Adding an Object Lifecycle Management rule checks the Age condition (90 days) and changes the storage class to Coldline or Archive automatically.
Transitions data to lower-cost storage classes once daily operational reliance decreases after 90 days.

Key Concept

Cloud Storage Bucket Lock and Object Lifecycle Management
Rate this question

Topics

Managing Storage and Database Solutions