Amazon
Avaya
Cisco
CompTIA
CrowdStrike
EC-Council
EXIN
Fortinet
Google
ISC
ISC2
ITIL
Juniper
Microsoft
NVIDIA
Okta
Palo Alto Networks
Salesforce
SAP
ServiceNow
All Vendors

Google Professional Cloud Security Engineer PROFESSIONAL CLOUD SECURITY ENGINEER Dumps in PDF

Free Google PROFESSIONAL CLOUD SECURITY ENGINEER Real Questions (page: 37)

PROFESSIONAL CLOUD SECURITY ENGINEER PDF — 361 Questions

Your company runs a website that will store PII on Google Cloud Platform. To comply with data privacy regulations, this data can only be stored for a specific amount of time and must be fully deleted after this specific period. Data that has not yet reached the time period should not be deleted. You want to automate the process of complying with this regulation.

What should you do?

  1. Store the data in a single Persistent Disk, and delete the disk at expiration time.
  2. Store the data in a single BigQuery table and set the appropriate table expiration time.
  3. Store the data in a Cloud Storage bucket, and configure the bucket's Object Lifecycle Management feature.
  4. Store the data in a single BigTable table and set an expiration time on the column families.

Answer(s): C

Explanation:

"To support common use cases like setting a Time to Live (TTL) for objects, retaining noncurrent versions of objects, or "downgrading" storage classes of objects to help manage costs, Cloud Storage offers the Object Lifecycle Management feature. This page describes the feature as well as the options available when using it. To learn how to enable Object Lifecycle Management, and for examples of lifecycle policies, see Managing Lifecycles." https://cloud.google.com/storage/docs/lifecycle



A DevOps team will create a new container to run on Google Kubernetes Engine. As the application will be internet-facing, they want to minimize the attack surface of the container.

What should they do?

  1. Use Cloud Build to build the container images.
  2. Build small containers using small base images.
  3. Delete non-used versions from Container Registry.
  4. Use a Continuous Delivery tool to deploy the application.

Answer(s): B

Explanation:

Small containers usually have a smaller attack surface as compared to containers that use large base images. https://cloud.google.com/blog/products/gcp/kubernetes-best-practices-how-and-why-to-

build-small-container-images



While migrating your organization's infrastructure to GCP, a large number of users will need to access GCP Console. The Identity Management team already has a well-established way to manage your users and want to keep using your existing Active Directory or LDAP server along with the existing SSO password.

What should you do?

  1. Manually synchronize the data in Google domain with your existing Active Directory or LDAP server.
  2. Use Google Cloud Directory Sync to synchronize the data in Google domain with your existing Active Directory or LDAP server.
  3. Users sign in directly to the GCP Console using the credentials from your on-premises Kerberos compliant identity provider.
  4. Users sign in using OpenID (OIDC) compatible IdP, receive an authentication token, then use that token to log in to the GCP Console.

Answer(s): B

Explanation:

https://cloud.google.com/architecture/identity/federating-gcp-with-active-directory-configuring- single-sign-on


Reference:

https://cloud.google.com/blog/products/identity-security/using-your-existing-identity- management- system-with-google-cloud-platform



Your company is using GSuite and has developed an application meant for internal usage on Google App Engine. You need to make sure that an external user cannot gain access to the application even when an employee's password has been compromised.

What should you do?

  1. Enforce 2-factor authentication in GSuite for all users.
  2. Configure Cloud Identity-Aware Proxy for the App Engine Application.
  3. Provision user passwords using GSuite Password Sync.
  4. Configure Cloud VPN between your private network and GCP.

Answer(s): A

Explanation:

https://docs.google.com/document/d/11o3e14tyhnT7w45Q8- r9ZmTAfj2WUNUpJPZImrxm_F4/edit?usp=sharing https://support.google.com/a/answer/175197?hl=en



A large financial institution is moving its Big Data analytics to Google Cloud Platform. They want to have maximum control over the encryption process of data stored at rest in BigQuery.

What technique should the institution use?

  1. Use Cloud Storage as a federated Data Source.
  2. Use a Cloud Hardware Security Module (Cloud HSM).
  3. Customer-managed encryption keys (CMEK).
  4. Customer-supplied encryption keys (CSEK).

Answer(s): C

Explanation:

If you want to manage the key encryption keys used for your data at rest, instead of having Google manage the keys, use Cloud Key Management Service to manage your keys. This scenario is known as customer-managed encryption keys (CMEK). https://cloud.google.com/bigquery/docs/encryption- at-rest


Reference:

https://cloud.google.com/bigquery/docs/encryption-at-rest



PDF
Viewing page 37 of 48

Share your comments for Google PROFESSIONAL CLOUD SECURITY ENGINEER exam with other users:

P
Prateek
9/18/2023 11:13:00 AM

kindly share the dumps

UNITED STATES
I
Irfan
11/25/2023 1:26:00 AM

very nice content

Anonymous
P
php
6/16/2023 12:49:00 AM

passed today

Anonymous
D
Durga
6/23/2023 1:22:00 AM

hi can you please upload questions

Anonymous
J
JJ
5/28/2023 4:32:00 AM

please upload quetions

THAILAND
N
Norris
1/3/2023 8:06:00 PM

i passed my exam thanks to this braindumps questions. these questions are valid in us and i highly recommend it!

UNITED STATES
A
abuti
7/21/2023 6:10:00 PM

are they truely latest

Anonymous
C
Curtis Nakawaki
7/5/2023 8:46:00 PM

questions appear contemporary.

UNITED STATES
V
Vv
12/2/2023 6:31:00 AM

good to prepare in this site

UNITED STATES
P
praveenkumar
11/20/2023 11:57:00 AM

very helpful to crack first attempt

Anonymous
A
asad Raza
5/15/2023 5:38:00 AM

please upload this exam

CHINA
R
Reeta
7/17/2023 5:22:00 PM

please upload the c_activate22 dump questions with answer

SWEDEN
W
Wong
12/20/2023 11:34:00 AM

q10 - the answer should be a. if its c, the criteria will meet if either the prospect is not part of the suppression lists or if the job title contains vice president

MALAYSIA
D
david
12/12/2023 12:38:00 PM

this was on the exam as of 1211/2023

Anonymous
T
Tink
7/24/2023 9:23:00 AM

great for prep

GERMANY
J
Jaro
12/18/2023 3:12:00 PM

i think in question 7 the first answer should be power bi portal (not power bi)

Anonymous
9
9eagles
4/7/2023 10:04:00 AM

on question 10 and so far 2 wrong answers as evident in the included reference link.

Anonymous
T
Tai
8/28/2023 5:28:00 AM

wonderful material

SOUTH AFRICA
V
VoiceofMidnight
12/29/2023 4:48:00 PM

i passed!! ...but barely! got 728, but needed 720 to pass. the exam hit me with labs right out of the gate! then it went to multiple choice. protip: study the labs!

UNITED STATES
A
A K
8/3/2023 11:56:00 AM

correct answer for question 92 is c -aws shield

Anonymous
N
Nitin Mindhe
11/27/2023 6:12:00 AM

great !! it is really good

IRELAND
B
BailleyOne
11/22/2023 1:45:00 AM

explanations for the answers are to the point.

Anonymous
P
patel
10/25/2023 8:17:00 AM

how can rea next

INDIA
M
MortonG
10/19/2023 6:32:00 PM

question: 128 d is the wrong answer...should be c

EUROPEAN UNION
J
Jayant
11/2/2023 3:15:00 AM

thanks for az 700 dumps

Anonymous
B
Bipul Mishra
12/14/2023 7:12:00 AM

thank you for this tableau dumps . it will helpfull for tableau certification

UNITED STATES
H
hello
10/31/2023 12:07:00 PM

good content

Anonymous
M
Matheus
9/3/2023 2:14:00 PM

just testing if the comments are real

UNITED STATES
Y
yenvti2@gmail.com
8/12/2023 7:56:00 PM

very helpful for exam preparation

Anonymous
M
Miguel
10/5/2023 12:16:00 PM

question 11: https://help.salesforce.com/s/articleview?id=sf.admin_lead_to_patient_setup_overview.htm&type=5

SPAIN
N
Noushin
11/28/2023 4:52:00 PM

i think the answer to question 42 is b not c

CANADA
S
susan sandivore
8/28/2023 1:00:00 AM

thanks for the dump

Anonymous
A
Aderonke
10/31/2023 12:51:00 AM

fantastic assessments

Anonymous
P
Priscila
7/22/2022 9:59:00 AM

i find the xengine test engine simulator to be more fun than reading from pdf.

GERMANY
AI Tutor 👋 I’m here to help!