Question

A healthcare company is evaluating Google Cloud for storing patient records. Their compliance team asks what protects the stored data if someone were to gain physical access to the underlying storage media in a Google data center. Which Google Cloud security feature addresses this specific concern by default, without any configuration by the customer?

Accepted Answer

Encryption at rest, which automatically encrypts all customer data stored on disk

Answer

Identity and Access Management (IAM) roles that restrict who can read the data

Answer

VPC Service Controls that create a security perimeter around resources

Answer

Cloud Armor, which protects applications from distributed denial-of-service attacks