Your organization requires compliance with GDPR regulations. Which GCP feature allows you to control where data is stored geographically?

Correct answer: Regions and Zones

Option D is correct because GCP Regions and Zones are the foundational geographic constructs that determine where your data physically resides, enabling organizations to restrict data storage to specific countries or regions to satisfy GDPR data residency requirements. Option A is incorrect because Instance Groups are a compute scaling mechanism for managing virtual machine fleets, not a data residency control. Option B is incorrect because Cloud CDN is a content delivery network that caches data at edge locations globally, which would actually complicate GDPR compliance rather than enforce geographic boundaries. Option C is incorrect because VPC Peering connects virtual networks together for private communication but does not control where data is stored geographically.