Question 1

Your organization wants to be compliant with the General Data Protection Regulation (GDPR) on Google Cloud You must implement data residency and operational sovereignty in the EU. What should you do? Choose 2 answers

Options :

A : Limit the physical location of a new resource with the Organization Policy Service resource locations constraint."

B : Use Cloud IDS to get east-west and north-south traffic visibility in the EU to monitor intra-VPC and mter-VPC communication.

C : Limit Google personnel access based on predefined attributes such as their citizenship or geographic location by using Key Access Justifications

D : Use identity federation to limit access to Google Cloud resources from non-EU entities.

E : Use VPC Flow Logs to monitor intra-VPC and inter-VPC traffic in the EU

Answer: A,C

Question 2

A customer has 300 engineers. The company wants to grant different levels of access and efficiently manage IAM permissions between users in the development and production environment projects. Which two steps should the company take to meet these requirements? (Choose two.)

Options :

A : Create a project with multiple VPC networks for each environment.

B : Create a folder for each development and production environment.

C : Create a Google Group for the Engineering team, and assign permissions at the folder level.

D : Create an Organizational Policy constraint for each folder environment.

E : Create projects for each environment, and grant IAM rights to each engineering user.

Answer: B,C

Question 3

As a food delivery company, your service is hosted on Compute Engine, and clients can access it on port 587. What form of Load Balancing on Google Cloud should you use to balance traffic between instances of the service while ensuring that the connection is secured by TLS and terminated by the Load Balancer?

Options :

A : Load balancing using TCP Proxy.

B : Load balancing for HTTP and HTTPS traffic.

C : Load balancing for network traffic

D : Load balancing with SSL Proxy

Answer: D

Question 4

In developing a secure environment for an online grocery delivery service company, what are the two essential components to include in building a secure container image using Google Cloud Services?

Options :

A : Make sure that the app is not executed as PID 1.

B : For the application, it is recommended to utilize public container images as the base image and incorporate multiple container image layers to conceal confidential data.

C : Eliminate any superfluous tools that are not required by the application.

D : Create a container for a single application.

Answer: C,D

Question 5

As an Online education platform company, you need to develop an internal App Engine application that can access a user's Google Drive without relying on current user credentials, while following Google's recommended practices. What steps should you take to accomplish this using Google Cloud Services?

Options :

A : To impersonate the user, you should create a new service account and provide it G Suite domain-wide delegation, which the application can use.

B : To ensure secure operations of the application, it is recommended to use a separate G Suite Admin account and authenticate the application-s activities using these credentials.

C : Generate a fresh Service account and assign Service Account User role to all the users of the application.

D : To grant access to all application users, a new Service account should be created and a Google Group should be created and all application users should be added to this group. Then, grant the Service Account User role to this group.

Answer: A

Confidently Practice Online with Free Professional-Cloud-Security-Engineer Exam Cram

Buying Options: