Google Cloud Professional Cloud Architect — Question 71

Your company acquired a healthcare startup and must retain its customers' medical information for up to 4 more years, depending on when it was created. Your corporate policy is to securely retain this data, and then delete it as soon as regulations allow.
Which approach should you take?

Answer options

• A. Store the data in Google Drive and manually delete records as they expire.
• B. Anonymize the data using the Cloud Data Loss Prevention API and store it indefinitely.
• C. Store the data in Cloud Storage and use lifecycle management to delete files when they expire.
• D. Store the data in Cloud Storage and run a nightly batch script that deletes all expired data.

Correct answer: C

Explanation

Option C is correct because it uses Cloud Storage's lifecycle management feature to automatically delete files when they are no longer needed, ensuring compliance with retention policies. Option A is not secure or efficient due to the manual deletion process. Option B does not address the requirement of deletion after the retention period, while Option D relies on a script that could introduce errors and is less efficient than automated lifecycle management.