Compliance certifications in GCP - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to specify the compliance certification in the GCP resource labels.

GCP

resource_labels = {"compliance": "[1]"}

Drag options to blanks, or click blank then click option'

AISO27001

BUbuntu

CWindowsServer

DMySQL

Attempts:

3 left

💡 Hint

Common Mistakes

Using operating system names instead of compliance certifications.

Using database names instead of compliance certifications.

The label "compliance" should be set to a valid compliance certification like "ISO27001" to indicate the resource meets that standard.

2fill in blank

medium

Complete the code to enable the GCP service that helps manage compliance and security policies.

GCP

gcloud services enable [1]

Drag options to blanks, or click blank then click option'

Astorage.googleapis.com

Bcompute.googleapis.com

Cbigquery.googleapis.com

Dsecuritycenter.googleapis.com

Attempts:

3 left

💡 Hint

Common Mistakes

Enabling unrelated services like Compute Engine or BigQuery.

Confusing storage service with security service.

The Security Command Center API (securitycenter.googleapis.com) helps manage compliance and security policies in GCP.

3fill in blank

hard

Fix the error in the command to list compliance certifications for a GCP project.

GCP

gcloud asset search-all-resources --scope=projects/[1] --query="labels.compliance:ISO27001"

Drag options to blanks, or click blank then click option'

Amy-project-123

B1234567890

Cprojects/my-project-123

Dmy-project

Attempts:

3 left

💡 Hint

Common Mistakes

Including 'projects/' prefix in the scope parameter.

Using numeric project number instead of project ID.

The scope parameter requires the project ID without the 'projects/' prefix. Using just the project ID like 'my-project-123' is correct.

4fill in blank

hard

Fill both blanks to create a policy binding that grants the Security Reviewer role to a user for compliance auditing.

GCP

gcloud projects add-iam-policy-binding [1] \
--member='user:[2]' \
--role='roles/securitycenter.securityReviewer'

Drag options to blanks, or click blank then click option'

Amy-compliance-project

[e-mail]

[e-mail]

Dtest-project

Attempts:

3 left

💡 Hint

Common Mistakes

Using wrong project ID or test project.

Assigning role to wrong user email.

The project ID should be the compliance project, and the user email should be the auditor's email to grant the Security Reviewer role correctly.

5fill in blank

hard

Fill all three blanks to define an organization policy that restricts VM instances to only use compliant machine types.

GCP

gcloud org-policies set-policy [1] \
--organization=[2] \
--policy-from-file=[3]

Drag options to blanks, or click blank then click option'

Arestrict-compliant-machine-types.yaml

B123456789012

Ccompute.vmExternalIpAccess

Dcompute.allowedMachineTypes

Attempts:

3 left

💡 Hint

Common Mistakes

Using wrong constraint name.

Using project ID instead of organization ID.

Incorrect policy file name.

The constraint 'compute.allowedMachineTypes' restricts machine types. The organization ID is numeric, and the policy file defines the restriction.

Practice

1. What is the main purpose of compliance certifications in cloud services like Google Cloud?

easy

A. To reduce the cost of cloud storage

B. To increase the speed of cloud servers

C. To prove the cloud meets security and privacy standards

D. To improve the user interface of cloud consoles

Solution

1. Step 1: Understand the role of compliance certifications

   Compliance certifications show that a cloud provider follows strict security and privacy rules.

2. Step 2: Identify the main goal in cloud context

   The main goal is to prove trustworthiness and legal compliance, not performance or cost.

3. Final Answer:

   To prove the cloud meets security and privacy standards -> Option C

4. Quick Check:

   Compliance = Security and Privacy Proof [OK]

Hint: Certifications prove security and privacy, not speed or cost [OK]

Common Mistakes:

• Confusing certifications with performance improvements
• Thinking certifications reduce costs
• Assuming certifications improve user interface

2. Which of the following is a valid way to check Google Cloud compliance certifications online?

easy

A. Visit the Google Cloud Compliance Resource Center website

B. Run a command in Google Cloud Shell to list certifications

C. Check the billing section in Google Cloud Console

D. Use Google Cloud Storage to store certification files

Solution

1. Step 1: Identify how to access compliance info

   Google Cloud provides a dedicated Compliance Resource Center website for certifications.

2. Step 2: Eliminate incorrect methods

   Commands, billing, or storage do not provide certification listings directly.

3. Final Answer:

   Visit the Google Cloud Compliance Resource Center website -> Option A

4. Quick Check:

   Compliance info is on the official website [OK]

Hint: Compliance details are on Google Cloud's official compliance website [OK]

Common Mistakes:

• Trying to find certifications via command line
• Looking in billing or storage sections
• Assuming certifications are downloadable files

3. Consider this snippet describing compliance certifications:

certifications = ['ISO 27001', 'SOC 2', 'HIPAA']
if 'SOC 2' in certifications:
    print('Google Cloud meets SOC 2 compliance')
else:
    print('SOC 2 compliance not found')

What will be printed?

medium

A. Google Cloud meets SOC 2 compliance

B. SOC 2 compliance not found

C. Error: list not defined

D. No output

Solution

1. Step 1: Check if 'SOC 2' is in the list

   The list contains 'SOC 2', so the condition is true.

2. Step 2: Determine the printed output

   Since condition is true, it prints 'Google Cloud meets SOC 2 compliance'.

3. Final Answer:

   Google Cloud meets SOC 2 compliance -> Option A

4. Quick Check:

   'SOC 2' in list = True [OK]

Hint: Check if item is in list to decide output [OK]

Common Mistakes:

• Assuming 'SOC 2' is missing
• Confusing syntax causing errors
• Thinking no output occurs

4. You wrote this code to check compliance certifications but it throws an error:

certifications = ['ISO 27001', 'SOC 2', 'HIPAA']
if certifications.contains('HIPAA'):
    print('HIPAA compliance confirmed')

What is the error and how to fix it?

medium

A. Error: Missing parentheses in print; fix by adding ()

B. No error; code runs fine

C. Error: 'HIPAA' is misspelled; fix by correcting spelling

D. Error: 'list' object has no attribute 'contains'; fix by using 'in' keyword

Solution

1. Step 1: Identify the method error

   Python lists do not have a 'contains' method; this causes an AttributeError.

2. Step 2: Correct the membership check syntax

   Use the 'in' keyword to check if 'HIPAA' is in the list.

3. Final Answer:

   Error: 'list' object has no attribute 'contains'; fix by using 'in' keyword -> Option D

4. Quick Check:

   Use 'in' for list membership, not 'contains' [OK]

Hint: Use 'in' to check list membership, not 'contains' method [OK]

Common Mistakes:

• Using 'contains' method on list
• Ignoring Python syntax errors
• Assuming code runs without error

5. A company needs to ensure their Google Cloud setup complies with GDPR and HIPAA. Which approach best helps them verify compliance?

hard

A. Ignore certifications and focus on cost optimization

B. Review Google Cloud's compliance certifications and use data protection tools

C. Manually audit all cloud servers daily without using certifications

D. Only rely on Google Cloud's default security settings

Solution

1. Step 1: Understand compliance verification needs

   The company must confirm Google Cloud meets GDPR and HIPAA standards and protect data accordingly.

2. Step 2: Identify best practice approach

   Reviewing official certifications ensures trust, and using data protection tools helps maintain compliance.

3. Final Answer:

   Review Google Cloud's compliance certifications and use data protection tools -> Option B

4. Quick Check:

   Certifications + tools = proper compliance check [OK]

Hint: Combine certification review with protection tools for compliance [OK]

Common Mistakes:

• Relying only on default settings
• Ignoring certifications
• Focusing on cost over compliance