Soru

Zorluk: OrtaDeploying and Configuring Cloud Storage Buckets and Objects

A cloud engineer must configure an existing Google Cloud Storage bucket named `analytics-raw-data-prod` to meet strict compliance guidelines. The bucket must prevent object deletion or modification for 90 days after creation and enforce uniform IAM access control across all objects by disabling individual object ACLs. Which TWO `gcloud` CLI commands should the cloud engineer execute to complete this configuration? (Select TWO.)

  1. gcloud storage buckets update gs://analytics-raw-data-prod --retention-period=90dCevap
  2. gcloud storage buckets update gs://analytics-raw-data-prod --enable-uniform-bucket-level-accessCevap
  3. C
    gsutil retention set 90d gs://analytics-raw-data-prod
  4. D
    gcloud storage objects update gs://analytics-raw-data-prod --set-acl=private

Cevap

The correct commands are executing `gcloud storage buckets update gs://analytics-raw-data-prod --retention-period=90d` to set the 90-day bucket retention policy, and executing `gcloud storage buckets update gs://analytics-raw-data-prod --enable-uniform-bucket-level-access` to enforce uniform bucket-level access controls.
To satisfy compliance requirements on a Cloud Storage bucket, retention policies and uniform bucket-level access must both be applied at the bucket resource level using the modern `gcloud storage buckets update` command with `--retention-period=90d` and `--enable-uniform-bucket-level-access` flags.

Adım Adım Çözüm

1
Configure the bucket-level retention policy using Google Cloud CLI
Applied a 90-day retention policy to prevent deletion/overwriting of objects
Bucket retention policies must be set at the bucket resource level using `--retention-period=90d`.
2
Enforce uniform IAM access control across the bucket
Disabled legacy per-object ACLs in favor of unified IAM policies
Uniform bucket-level access is configured at the bucket level using `--enable-uniform-bucket-level-access`.

Anahtar Kavram

Cloud Storage Bucket Configuration (Retention Policies & Access Controls via gcloud CLI)
Bu soruyu puanla