ExpertThis question is part of a case study — click to read the full scenario(Case 11)
CASE STUDY: HealthData Inc
Overview:
Industry: Healthcare Analytics
Size: 1000 employees
Environment:
- Co-located data center
- Hadoop cluster
- SFTP servers
- 50 TB patient data
Requirements:
- ML models for diagnostics
- Secure data sharing portals
- Break data silos
Exec Statements:
- CEO: Need compute for ML.
- CRO: HIPAA compliance is top priority.
- CTO: Managed services needed to replace Hadoop.
Tech Reqs:
- Strict HIPAA compliance
- Automated PHI de-identification
- Comprehensive audit logging
- CMEK
- Network isolation (no public internet)
Constraints:
- US data sovereignty
- 7-year retention (immutable)
- Easy auditor access
QUESTION: To replace the on-premises Hadoop cluster with a managed service while minimizing migration effort, which GCP service should you recommend?
GCP PCA · Question 15 · Technical Processes
CASE STUDY: HealthData Inc
Overview:
Industry: Healthcare Analytics
Size: 1000 employees
Environment:
- Co-located data center
- Hadoop cluster
- SFTP servers
- 50 TB patient data
Requirements:
- ML models for diagnostics
- Secure data sharing portals
- Break data silos
Exec Statements:
- CEO: Need compute for ML.
- CRO: HIPAA compliance is top priority.
- CTO: Managed services needed to replace Hadoop.
Tech Reqs:
- Strict HIPAA compliance
- Automated PHI de-identification
- Comprehensive audit logging
- CMEK
- Network isolation (no public internet)
Constraints:
- US data sovereignty
- 7-year retention (immutable)
- Easy auditor access
QUESTION: To satisfy the requirement for 'easy auditor access' to comprehensive audit logs, how should you configure Cloud Logging?
CASE STUDY: HealthData Inc
Overview:
Industry: Healthcare Analytics
Size: 1000 employees
Environment:
- Co-located data center
- Hadoop cluster
- SFTP servers
- 50 TB patient data
Requirements:
- ML models for diagnostics
- Secure data sharing portals
- Break data silos
Exec Statements:
- CEO: Need compute for ML.
- CRO: HIPAA compliance is top priority.
- CTO: Managed services needed to replace Hadoop.
Tech Reqs:
- Strict HIPAA compliance
- Automated PHI de-identification
- Comprehensive audit logging
- CMEK
- Network isolation (no public internet)
Constraints:
- US data sovereignty
- 7-year retention (immutable)
- Easy auditor access
QUESTION: To satisfy the requirement for 'easy auditor access' to comprehensive audit logs, how should you configure Cloud Logging?
Answer options:
Grant auditors the 'roles/logging.viewer' IAM role at the Organization level.
Create a log sink to export all Admin Activity and Data Access logs to a dedicated BigQuery dataset.
Export logs to a Pub/Sub topic and have auditors subscribe to the topic.
Download logs manually as CSV files and email them to the auditors monthly.
How to approach this question
Full Answer
Common mistakes
Practice the full GCP Professional Cloud Architect Practice Exam 6
50 questions · hints · full answers · grading