A company needs to ensure their data stays within a specific geographic region for compliance. Which Google Cloud feature enables this?

Correct answer: Data residency with regional resources

Data residency with regional resources (Option D) is the correct Google Cloud feature for ensuring data remains within a specific geographic region for compliance, because Google Cloud allows you to deploy resources, including storage buckets, databases, and compute instances, to specific regions, and organization policies can enforce these boundaries to meet data sovereignty requirements. Option A, resource labels, are metadata tags used for cost allocation, filtering, and organization of resources, and have no bearing on where data is physically stored or processed. Option B, Identity-Aware Proxy, is an access control service that verifies user identity and context before granting application access, which is unrelated to geographic data placement. Option C, Cloud Armor, is a web application firewall and DDoS protection service focused on traffic security, not data location compliance.