Google Google Professional Cloud Security Engineer

Choose your answer

• A

  Public IP

• B

  IP Forwarding

• C

  Private Google Access

• D

  Static routes

• E

  IAM Network User Role

Pick an answer to check it, or press Show answer to see the correct one.

Choose your answer

• A

  A rule that allows all outbound connections

• B

  A rule that denies all inbound connections

• C

  A rule that blocks all inbound port 25 connections

• D

  A rule that blocks all outbound connections

• E

  A rule that allows all inbound port 80 connections

Pick an answer to check it, or press Show answer to see the correct one.

Choose your answer

• A

  Use Cloud Source Repositories, and store secrets in Cloud SQL.

• B

  Encrypt the secrets with a Customer-Managed Encryption Key (CMEK), and store them in Cloud Storage.

• C

  Run the Cloud Data Loss Prevention API to scan the secrets, and store them in Cloud SQL.

• D

  Deploy the SCM to a Compute Engine VM with local SSDs, and enable preemptible VMs.

Pick an answer to check it, or press Show answer to see the correct one.

Choose your answer

• A

  Set up Cloud Directory Sync to sync groups, and set IAM permissions on the groups.

• B

  Set up SAML 2.0 Single Sign-On (SSO), and assign IAM permissions to the groups.

• C

  Use the Cloud Identity and Access Management API to create groups and IAM permissions from Active Directory.

• D

  Use the Admin SDK to create groups and assign IAM permissions from Active Directory.

Pick an answer to check it, or press Show answer to see the correct one.

Choose your answer

• A

  Ensure that the app does not run as PID 1.

• B

  Package a single app as a container.

• C

  Remove any unnecessary tools not needed by the app.

• D

  Use public container images as a base image for the app.

• E

  Use many container image layers to hide sensitive information.

Pick an answer to check it, or press Show answer to see the correct one.