Question

A retail company runs two workloads in Google Cloud. Workload A uses Compute Engine virtual machines, and Workload B uses App Engine (a managed platform service). During a security audit, the operations team wants to understand which security tasks they must handle versus what Google manages. Which statement correctly describes the difference in responsibility between these two workloads?

Accepted Answer

For Workload A the customer must manage the guest OS and its patches, while for Workload B Google manages the operating system and runtime so the customer focuses on application code and data.

Answer

For both workloads Google is fully responsible for the operating system, so the customer only manages network firewall rules.

Answer

For Workload B the customer must patch the underlying operating system, while for Workload A Google handles all OS patching automatically.

Answer

In both cases the customer is responsible for the physical security of the data center hardware running the workloads.