Free Google Professional-Cloud-Security-Engineer Exam Questions
Absolute Free Professional-Cloud-Security-Engineer Exam Practice for Comprehensive Preparation
-
Google Professional-Cloud-Security-Engineer Exam Questions
-
Provided By: Google
- Exam: Professional Cloud Security Engineer
- Certification: Google Cloud Certified
-
Total Questions: 365
-
Updated On: Sep 02, 2026
-
Rated: 4.9 |
-
Online Users: 730
-
Question 1
-
The CISO of your highly regulated organization has mandated that all AI applications running in production
must be based on Google first-party models. Your security team has now implemented the Model Garden's
organization policy meant to centrally control access and user actions on these approved models at the
production folder level. However, it appears that someone has overwritten the policy. This has allowed
developers to access third-party models on a particular production project. You need to resolve the issue with
a solution that prevents a repeat occurrence. What should you do?
Answer: A
-
The CISO of your highly regulated organization has mandated that all AI applications running in production
must be based on Google first-party models. Your security team has now implemented the Model Garden's
organization policy meant to centrally control access and user actions on these approved models at the
production folder level. However, it appears that someone has overwritten the policy. This has allowed
developers to access third-party models on a particular production project. You need to resolve the issue with
a solution that prevents a repeat occurrence. What should you do?
-
Question 2
-
As a Blockchain-based payment system company, we are migrating to Google Cloud and want to ensure network security controls are maintained. What solution can we implement to ensure effective network security controls as part of the new shared responsibility model between our company and Google Cloud?
Answer: D
-
-
Question 3
-
Your organization has established a highly sensitive project within a VPC Service Controls perimeter. Youneed to ensure that only users meeting specific contextual requirements such as having a company-manageddevice, a specific location, and a valid user identity can access resources within this perimeter. You want toevaluate the impact of this change without blocking legitimate access. What should you do?
Answer: C
-
Your organization has established a highly sensitive project within a VPC Service Controls perimeter. Youneed to ensure that only users meeting specific contextual requirements such as having a company-manageddevice, a specific location, and a valid user identity can access resources within this perimeter. You want toevaluate the impact of this change without blocking legitimate access. What should you do?
-
Question 4
-
Your organization has an application hosted in Cloud Run. You must control access to the application byusing Cloud Identity-Aware Proxy (IAP) with these requirements:Only users from the AppDev group may have access.Access must be restricted to internal network IP addresses.What should you do?
Answer: C
-
Your organization has an application hosted in Cloud Run. You must control access to the application byusing Cloud Identity-Aware Proxy (IAP) with these requirements:Only users from the AppDev group may have access.Access must be restricted to internal network IP addresses.What should you do?
-
Question 5
-
You define central security controls in your Google Cloud environment for one of the folders in your organization you set an organizational policy to deny the assignment of external IP addresses to VMs. Two days later you receive an alert about a new VM with an external IP address under that folder. What could have caused this alert?
Answer: C
-