Professional-Cloud-Security-Engineer Exam: Absolutely Free Online Practice

Question 1
- As an online education platform company, which document should you review to identify Google Cloud's inherent controls for PCI compliance evaluation?
  
  A : Documentation related to Compute Engine product.
  
  B : Guidelines for Cloud Computing by PCI SSC.
  
  C : Security Assessment Procedures and PCI DSS Requirements
  
  D : Matrix of Customer Responsibility in Google Cloud Platform
  
  Answer: D
Question 2
- Your organization is using GitHub Actions as a continuous integration and delivery (Cl/CD) platform. You must enable access to Google Cloud resources from the Cl/CD pipelines in the most secure way. What should you do?
  
  A : Create a service account key and add it to the GitHub pipeline configuration file
  
  B : Create a service account key and add it to the GitHub repository content
  
  C :
  Configure a Google Kubernetes Engine cluster that uses Workload Identity to supply credentials to GitHub.
  
  D : Configure workload identity federation to use GitHub as an identity pool provider.
  
  Answer: D
Question 3
- Your organization relies heavily on virtual machines (VMs) in Compute Engine. Due to team growth andresource demands. VM sprawl is becoming problematic. Maintaining consistent security hardening and timelypackage updates poses an increasing challenge. You need to centralize VM image management and automatethe enforcement of security baselines throughout the virtual machine lifecycle. What should you do?
  A : Activate Security Command Center Enterprise. Use VM discovery and posture management features tomonitor hardening state and trigger automatic responses upon detection of issues.B. Create a CloudBuild trigger to build a pipeline that generates hardened VM images. Run vulnerability scans in thepipeline, and store images with passing scans in a registry. Use instance templates pointing to thisregistry.
  
  B : Configure the sole-tenancy feature in Compute Engine for all projects. Set up custom organization policies in Policy Controller to restrict the operating systems and image sources that teams are allowed to use.
  
  C : Use VM Manager to automatically distribute and apply patches to VMs across your projects. IntegrateVM Manager with hardened. organization-standard VM images stored in a central repository.
  
  Answer: B
Question 4
- Your organization uses Google Workspace as the primary identity provider for Google Cloud Users in yourorganization initially created their passwords. You need to improve password security due to a recent securityevent. What should you do?
  A : Audit user activity for suspicious logins by using the audit and investigation tool.
  
  B : Conduct a security awareness training session, and set the password expiration settings to require more frequent updates.
  
  C : Check the Enforce strong password box, and set the password expiration to occur more frequently.
  
  D : Check the Enforce strong password box, and check Enforce password policy at the next sign-in.
  
  Answer: D
Question 5
- Your organization has established a highly sensitive project within a VPC Service Controls perimeter. Youneed to ensure that only users meeting specific contextual requirements such as having a company-manageddevice, a specific location, and a valid user identity can access resources within this perimeter. You want toevaluate the impact of this change without blocking legitimate access. What should you do?
  A : Configure a VPC Service Controls perimeter in dry run mode, and enforce strict network segmentationusing firewall rules. Use multi-factor authentication (MFA) for user verification.
  
  B : Use Cloud Audit Logs to monitor user access to the project resources. Use post-incident analysis toidentify unauthorized access attempts.
  
  C : Establish a Context-Aware Access policy that specifies the required contextual attributes, and associatethe policy with the VPC Service Controls perimeter in dry run mode.
  
  D : Use the VPC Service Control Violation dashboard to identify the impact of details about access denialsby service perimeters.
  
  Answer: C

Free Google Professional-Cloud-Security-Engineer Exam Questions

Absolute Free Professional-Cloud-Security-Engineer Exam Practice for Comprehensive Preparation