Professional-Cloud-Security-Engineer Exam: Absolutely Free Online Practice

Question 1
- You are in charge of migrating a legacy application from your company datacenters to GCP before the current maintenance contract expires. You do not know what ports the application is using and no documentation is available for you to check. You want to complete the migration without putting your environment at risk. What should you do?
  
  A :
  Migrate the application into an isolated project using a “Lift & Shift” approach. Enable all internal TCP traffic using VPC Firewall rules. Use VPC Flow logs to determine what traffic should be allowed for the application to work properly.
  
  B :
  Migrate the application into an isolated project using a “Lift & Shift” approach in a custom network. Disable all traffic within the VPC and look at the Firewall logs to determine what traffic should be allowed for the application to work properly.
  
  C :
  Refactor the application into a micro-services architecture in a GKE cluster. Disable all traffic from outside the cluster using Firewall Rules. Use VPC Flow logs to determine what traffic should be allowed for the application to work properly.
  
  D :
  Refactor the application into a micro-services architecture hosted in Cloud Functions in an isolated project. Disable all traffic from outside your project using Firewall Rules. Use VPC Flow logs to determine what traffic should be allowed for the application to work properly.
  
  Answer: A
Question 2
- As a member of the security team for a Smart Home Automation company, what steps should you take to reduce the scope of systems subject to PCI audit standards in your GCP project that includes credit card payment processing systems, web applications, and data processing systems?
  
  A : It is recommended to utilize VPN to establish connections between your office and cloud environments.
  
  B : Separate the GCP project to house the cardholder data environment.
  
  C : It is recommended to implement multi-factor authentication to secure the admin access to the web application.
  
  D : Utilize solely PA-DSS compliant certified applications.
  
  Answer: B
Question 3
- You are responsible for protecting highly sensitive data in BigQuery. Your operations teams need access to this data, but given privacy regulations, you want to ensure that they cannot read the sensitive fields such as email addresses and first names. These specific sensitive fields should only be available on a need-to-know basis to the HR team. What should you do?
  
  A : Perform data masking with the DLP API and store that data in BigQuery for later use
  
  B : Perform data redaction with the DLP API and store that data in BigQuery for later use
  
  C : Perform data inspection with the DLP API and store that data in BigQuery for later use.
  
  D : Perform tokenization for Pseudonymization with the DLP API and store that data in BigQuery for later use.
  
  Answer: D
Question 4
- Your organization relies heavily on virtual machines (VMs) in Compute Engine. Due to team growth andresource demands. VM sprawl is becoming problematic. Maintaining consistent security hardening and timelypackage updates poses an increasing challenge. You need to centralize VM image management and automatethe enforcement of security baselines throughout the virtual machine lifecycle. What should you do?
  A : Activate Security Command Center Enterprise. Use VM discovery and posture management features tomonitor hardening state and trigger automatic responses upon detection of issues.B. Create a CloudBuild trigger to build a pipeline that generates hardened VM images. Run vulnerability scans in thepipeline, and store images with passing scans in a registry. Use instance templates pointing to thisregistry.
  
  B : Configure the sole-tenancy feature in Compute Engine for all projects. Set up custom organization policies in Policy Controller to restrict the operating systems and image sources that teams are allowed to use.
  
  C : Use VM Manager to automatically distribute and apply patches to VMs across your projects. IntegrateVM Manager with hardened. organization-standard VM images stored in a central repository.
  
  Answer: B
Question 5
- Your organization must comply with the regulation to keep instance logging data within Europe. Yourworkloads will be hosted in the Netherlands in region europe-west4 in a new project. You must configureCloud Logging to keep your data in the country.What should you do?
  A : Configure the organization policy constraint gcp.resourceLocations to europe-west4.
  
  B : Set the logging storage region to eurcpe-west4 by using the gcloud CLI logging settings update.
  
  C : Create a new tog bucket in europe-west4. and redirect the _Def auit bucKet to the new bucket.
  
  D : Configure log sink to export all logs into a Cloud Storage bucket in europe-west4.
  
  Answer: D

Free Google Professional-Cloud-Security-Engineer Exam Questions

Absolute Free Professional-Cloud-Security-Engineer Exam Practice for Comprehensive Preparation