Compliance, Supply Chain and AI Security
This topic covers compliance, audits, PII, sovereignty, organization policy, hierarchical firewall policies, software supply chain security, Model Armor, and Sensitive Data Protection.
How to study for Google Professional Cloud Architect
Treat each item as an architecture tradeoff: identify business drivers, technical constraints, migration dependencies, security controls, reliability targets, and operating model.
Core concepts
Concept 1
Compliance, Supply Chain and AI Security questions test Google Cloud architecture tradeoffs instead of isolated product recall.
Exam cue: Identify the business driver, workload shape, data path, security boundary, reliability target, and operations model.
Concept 2
The best answer maps business goals to technical requirements, Well-Architected pillars, service fit, security, cost, reliability, and operations.
Exam cue: Choose the Google Cloud pattern that satisfies the stated constraint with the least unnecessary custom operations.
Concept 3
Eliminate options that ignore migration dependencies, resource hierarchy, data movement, network boundaries, compliance, or operational ownership.
Exam cue: Prefer managed, observable, secure, resilient, cost-aware, and automatable designs when requirements support them.
Risk pitfalls and guardrails
Choosing a familiar product before reading the business and technical constraints.
Guardrail: Avoid answers that pick products before reading business needs, compliance, migration dependencies, reliability targets, or operations ownership.
Optimizing for one pillar while ignoring security, reliability, performance, cost, or sustainability.
Guardrail: Avoid answers that pick products before reading business needs, compliance, migration dependencies, reliability targets, or operations ownership.
Skipping migration, deployment, monitoring, or support implications in an architecture scenario.
Guardrail: Avoid answers that pick products before reading business needs, compliance, migration dependencies, reliability targets, or operations ownership.
Memory anchors
Organization Policy
Organization Policy centrally enforces constraints on Google Cloud resource configurations.
Hierarchical Firewall Policy
Hierarchical firewall policies apply network security rules across folders and organizations.
Sensitive Data Protection
Sensitive Data Protection discovers, classifies, and helps protect sensitive data.
Model Armor
Model Armor helps add safety and security controls for generative AI applications.
Software Supply Chain
Software supply chain security protects source, dependencies, builds, artifacts, and deployment paths.
Audit Log
Audit logs record administrative, data access, and system events for investigation and compliance.
Data Sovereignty
Data sovereignty requirements influence region, access, encryption, and operational control choices.
PII
Personally identifiable information needs controls for collection, storage, access, masking, and retention.
SOC 2
SOC 2 is an example of a commercial assurance framework that can affect control evidence.
Compliance Mapping
Compliance mapping links legal, commercial, and industry requirements to cloud controls.
Checkpoint rule
Do the check-up only after you can summarize each concept in one sentence and identify one dangerous pitfall from memory.
Knowledge Check (after reading)
Short check-up to confirm understanding of this module.
Check-up Questions
A healthcare company sees that Google Cloud offers services covered by relevant compliance programs. What is the correct conclusion?
A system processes payment-card data. Which architecture strategy most directly reduces PCI scope?
Answer all questions to submit.
Next step personalized recommendations
Continue learning
Move forward only after this module is stable.
What is Pass Harbor?
Completely free exam prep for 317 U.S. exams.
- Practice questions
- Flashcards
- Study guides
- Mock exams
- No registration
- No paywall
- Start instantly
“No more expensive exam prep. Quality study tools should be accessible to everyone.”