Question

A retail company is evaluating Google Cloud and asks who is responsible for security once they move workloads to the cloud. Their CISO wants to understand the guiding principle that defines how security duties are divided between the company and Google. Which concept should you explain to the CISO?

Accepted Answer

The shared responsibility model, where security obligations are split between Google and the customer depending on the service tier used

Answer

The CIA triad, which guarantees that Google handles all confidentiality, integrity, and availability concerns for the customer

Answer

Defense in depth, which places full responsibility for every security layer on Google's infrastructure teams

Answer

The zero-trust model, which transfers all data protection responsibilities to the cloud provider