Question 1

A company has redundant mail servers in different Google Cloud Platform regions and wants to routecustomers to the nearest mail server based on location.How should the company accomplish this?

Options :

A : Configure TCP Proxy Load Balancing as a global load balancing service listening on port 995

B : Create a Network Load Balancer to listen on TCP port 995 with a forwarding rule to forward traffic based on location

C : Use Cross-Region Load Balancing with an HTTP(S) load balancer to route traffic to the nearest region.

D : Use Cloud CDN to route the mail traffic to the closest origin mail server based on client IP address.

Answer: A

Question 2

Your company's users access data in a BigQuery table. You want to ensure they can only access the data during working hours. What should you do?

Options :

A : Assign a BigQuery Data Viewer role along with an 1AM condition that limits the access to specified working hours.

B : Configure Cloud Scheduler so that it triggers a Cloud Functions instance that modifies the organizational policy constraints for BigQuery during the specified working hours.

C : Assign a BigQuery Data Viewer role to a service account that adds and removes the users daily during the specified working hours

D : Run a gsuttl script that assigns a BigQuery Data Viewer role, and remove it only during the specified working hours.

Answer: A

Question 3

You are on your company's development team. You noticed that your web application hosted in staging on GKE dynamically includes user data in web pages without first properly validating the inputted data. This could allow an attacker to execute gibberish commands and display arbitrary content in a victim user's browser in a production environment. How should you prevent and fix this vulnerability?

Options :

A : Use Cloud IAP based on IP address or end-user device attributes to prevent and fix the vulnerability.

B : Set up an HTTPS load balancer, and then use Cloud Armor for the production environment to prevent the potential XSS attack.

C : Use Web Security Scanner to validate the usage of an outdated library in the code, and then use a secured version of the included library.

D : Use Web Security Scanner in staging to simulate an XSS injection attack, and then use a templating system that supports contextual auto-escaping.

Answer: D

Question 4

A large e-retailer is moving to Google Cloud Platform with its ecommerce website. The company wants toensure payment information is encrypted between the customer’s browser and GCP when the customerscheckout online.What should they do?

Options :

A : Configure an SSL Certificate on an L7 Load Balancer and require encryption

B : Configure an SSL Certificate on a Network TCP Load Balancer and require encryption

C : Configure the firewall to allow inbound traffic on port 443, and block all other inbound traffic

D : Configure the firewall to allow outbound traffic on port 443, and block all other outbound traffic.

Answer: A

Question 5

Which of the following tools is used for auditing, monitoring, and analysis of resources in a Crowdfunding platform that uses Google Cloud Services?

Options :

A : The managed service for running Kubernetes clusters on Google Cloud is called Google Kubernetes Engine.

B : Storage services provided by Google Cloud.

C : Logging on Google Cloud Platform

D : The Google Cloud SQL is a fully-managed database service provided by Google Cloud Platform.

Answer: C

Confidently Practice Online with Free Professional-Cloud-Security-Engineer Exam Cram

Buying Options: