Skip to content
ExamCup

Google

Google Google Professional Cloud Security Engineer

Google Professional Cloud Security Engineer

Practice questions with verified answers, detailed explanations, and community discussions.

355
Questions
today
Last updated
Guest
Your plan

25 free questions

Unlock more questions
Show
Question map
  1. 1
  2. 2
  3. 3
  4. 4
  5. 5
  6. 6
  7. 7
  8. 8
  9. 9
  10. 10
  11. 11
  12. 12
  13. 13
  14. 14
  15. 15
  16. 16
  17. 17
  18. 18
  19. 19
  20. 20
  21. 21
  22. 22
  23. 23
  24. 24
  25. 25

  • Question 6 of 355

    Topic 1: Professional Cloud Security Engineer

    Topic 1: Professional Cloud Security Engineer

    A customer needs to launch a 3-tier internal web application on Google Cloud Platform (GCP). The customer's internal compliance requirements dictate that end-

    user access may only be allowed if the traffic seems to originate from a specific known good CIDR. The customer accepts the risk that their application will only

    have SYN flood DDoS protection. They want to use GCP's native SYN flood protection.

    Which product should be used to meet these requirements?

    Choose your answer

    Pick an answer to check it, or press Show answer to see the correct one.

  • Question 7 of 355

    Topic 1: Professional Cloud Security Engineer

    Topic 1: Professional Cloud Security Engineer

    A company is running workloads in a dedicated server room. They must only be accessed from within the private company network. You need to connect to these

    workloads from Compute Engine instances within a Google Cloud Platform project.

    Which two approaches can you take to meet the requirements? (Choose two.)

    Choose your answer

    Pick an answer to check it, or press Show answer to see the correct one.

  • Question 8 of 355

    Topic 1: Professional Cloud Security Engineer

    Topic 1: Professional Cloud Security Engineer

    A customer implements Cloud Identity-Aware Proxy for their ERP system hosted on Compute Engine. Their security team wants to add a security layer so that the

    ERP systems only accept traffic from Cloud Identity-Aware Proxy.

    What should the customer do to meet these requirements?

    Choose your answer

    Pick an answer to check it, or press Show answer to see the correct one.

  • Question 9 of 355

    Topic 1: Professional Cloud Security Engineer

    Topic 1: Professional Cloud Security Engineer

    A company has been running their application on Compute Engine. A bug in the application allowed a malicious user to repeatedly execute a script that results in

    the Compute Engine instance crashing. Although the bug has been fixed, you want to get notified in case this hack re-occurs.

    What should you do?

    Choose your answer

    Pick an answer to check it, or press Show answer to see the correct one.

  • Question 10 of 355

    Topic 1: Professional Cloud Security Engineer

    Topic 1: Professional Cloud Security Engineer

    Your team needs to obtain a unified log view of all development cloud projects in your SIEM. The development projects are under the NONPROD organization

    folder with the test and pre-production projects. The development projects share the ABC-BILLING billing account with the rest of the organization.

    Which logging export strategy should you use to meet the requirements?

    Choose your answer

    Pick an answer to check it, or press Show answer to see the correct one.