Google Cloud Professional Cloud DevOps Engineer — Question 183

You work for a healthcare company and regulations require you to create all resources in a United States-based region. You attempted to create a secret in Secret Manager but received the following error message:

Constraint constraints/gcp.resourceLocations violated for [orgpolicy:projects/000000] attempting to create a secret in [global]

You need to resolve the error while remaining compliant with regulations. What should you do?

Answer options

• A. Remove the organization policy referenced in the error message.
• B. Create the secret with an automatic replication policy.
• C. Create the secret with a user-managed replication policy.
• D. Add the global region to the organization policy referenced in the error message.

Correct answer: C

Explanation

The correct answer is C, as creating the secret with a user-managed replication policy allows you to specify the region, ensuring compliance with the requirement to use a United States-based region. Answer A is incorrect because removing the organization policy would violate compliance regulations. Answer B is not suitable as an automatic replication policy may not guarantee that resources are created in the required region. Answer D is incorrect since adding the global region to the policy would contravene the organization's regulations.