Professional-Cloud-Security-Engineer Exam: Absolutely Free Online Practice

Question 1
- You are a consultant for an organization that is considering migrating their data from its private cloud to Google Cloud. The organization's compliance team is not familiar with Google Cloud and needs guidance on how compliance requirements will be met on Google Cloud. One specific compliance requirement is for customer data at rest to reside within specific geographic boundaries. Which option should you recommend for the organization to meet their data residency requirements on Google Cloud?
  A : Organization Policy Service constraints
  
  B : Shielded VM instances
  
  C : Access control lists
  
  D : Geolocation access controls
  
  E : Google Cloud Armor
  
  Answer: A
Question 2
- Your organization has established a highly sensitive project within a VPC Service Controls perimeter. Youneed to ensure that only users meeting specific contextual requirements such as having a company-manageddevice, a specific location, and a valid user identity can access resources within this perimeter. You want toevaluate the impact of this change without blocking legitimate access. What should you do?
  A : Configure a VPC Service Controls perimeter in dry run mode, and enforce strict network segmentationusing firewall rules. Use multi-factor authentication (MFA) for user verification.
  
  B : Use Cloud Audit Logs to monitor user access to the project resources. Use post-incident analysis toidentify unauthorized access attempts.
  
  C : Establish a Context-Aware Access policy that specifies the required contextual attributes, and associatethe policy with the VPC Service Controls perimeter in dry run mode.
  
  D : Use the VPC Service Control Violation dashboard to identify the impact of details about access denialsby service perimeters.
  
  Answer: C
Question 3
- Your organization uses Google Workspace as the primary identity provider for Google Cloud Users in yourorganization initially created their passwords. You need to improve password security due to a recent securityevent. What should you do?
  A : Audit user activity for suspicious logins by using the audit and investigation tool.
  
  B : Conduct a security awareness training session, and set the password expiration settings to require more frequent updates.
  
  C : Check the Enforce strong password box, and set the password expiration to occur more frequently.
  
  D : Check the Enforce strong password box, and check Enforce password policy at the next sign-in.
  
  Answer: D
Question 4
- Your organization relies heavily on virtual machines (VMs) in Compute Engine. Due to team growth andresource demands. VM sprawl is becoming problematic. Maintaining consistent security hardening and timelypackage updates poses an increasing challenge. You need to centralize VM image management and automatethe enforcement of security baselines throughout the virtual machine lifecycle. What should you do?
  A : Activate Security Command Center Enterprise. Use VM discovery and posture management features tomonitor hardening state and trigger automatic responses upon detection of issues.B. Create a CloudBuild trigger to build a pipeline that generates hardened VM images. Run vulnerability scans in thepipeline, and store images with passing scans in a registry. Use instance templates pointing to thisregistry.
  
  B : Configure the sole-tenancy feature in Compute Engine for all projects. Set up custom organization policies in Policy Controller to restrict the operating systems and image sources that teams are allowed to use.
  
  C : Use VM Manager to automatically distribute and apply patches to VMs across your projects. IntegrateVM Manager with hardened. organization-standard VM images stored in a central repository.
  
  Answer: B
Question 5
- A ticketing platform company adopts Google Cloud Platform (GCP) for their ticketing application and needs guidance on setting up password requirements for their Cloud Identity account. The company has a password policy requirement that customer passwords must have a minimum number of characters. Which Cloud Identity password guidelines can the company use to inform their new requirements?
  
  A : Specify a minimum character count of 12 for passwords.
  
  B : Specify a minimum password length of 6 characters.
  
  C : Specify a password length requirement of at least 10 characters.
  
  D : Specify a minimum password length of 8 characters.
  
  Answer: D

Free Google Professional-Cloud-Security-Engineer Exam Questions

Absolute Free Professional-Cloud-Security-Engineer Exam Practice for Comprehensive Preparation