Google Google Professional Cloud Security Engineer

Choose your answer

• A

  App Engine

• B

  Cloud Functions

• C

  Compute Engine

• D

  Google Kubernetes Engine

• E

  Cloud Storage

Pick an answer to check it, or press Show answer to see the correct one.

Choose your answer

• A

  Upload an .htaccess file containing the customer and employee user accounts to App Engine.

• B

  Create an App Engine firewall rule that allows access from the customer and employee networks and denies all other traffic.

• C

  Enable Cloud Identity-Aware Proxy (IAP), and allow access to a Google Group that contains the customer and employee user accounts.

• D

  Use Cloud VPN to create a VPN connection between the relevant on-premises networks and the company’s GCP Virtual Private Cloud (VPC) network.

Pick an answer to check it, or press Show answer to see the correct one.

Choose your answer

• A

  Use Cloud Key Management Service to encrypt PII shared by customers before storing it for analysis.

• B

  Use Object Lifecycle Management to make sure that all chat records containing PII are discarded and not saved for analysis.

• C

  Use the image inspection and redaction actions of the DLP API to redact PII from the images before storing them for analysis.

• D

  Use the generalization and bucketing actions of the DLP API solution to redact PII from the texts before storing them for analysis.

Pick an answer to check it, or press Show answer to see the correct one.

Choose your answer

• A

  Open Cloud Shell and run gcloud iam service-accounts enable-auto-rotate --iam-account=IAM_ACCOUNT.

• B

  Open Cloud Shell and run gcloud iam service-accounts keys rotate --iam-account=IAM_ACCOUNT --key=NEW_KEY.

• C

  Create a new key, and use the new key in the application. Delete the old key from the Service Account.

• D

  Create a new key, and use the new key in the application. Store the old key on the system as a backup key.

Pick an answer to check it, or press Show answer to see the correct one.

Choose your answer

• A

  Shared VPC Network with a host project and service projects

• B

  Grant Compute Admin role to the networking team for each engineering project

• C

  VPC peering between all engineering projects using a hub and spoke model

• D

  Cloud VPN Gateway between all engineering projects using a hub and spoke model

Pick an answer to check it, or press Show answer to see the correct one.