PROFESSIONAL-CLOUD-SECURITY-ENGINEER Exam Questions and Answers (Page: 8)

QUESTION: 36

A retail customer allows users to upload comments and product reviews. The customer needs to make sure the text does not include sensitive data before the comments or reviews are published.

Which Google Cloud Service should be used to achieve this?

Cloud Key Management Service
Cloud Data Loss Prevention API
BigQuery
Cloud Security Scanner

Answer(s): B

Reveal Solution Next Question

QUESTION: 37

A company allows every employee to use Google Cloud Platform. Each department has a Google Group, with all department members as group members. If a department member creates a new project, all members of that department should automatically have read-only access to all new project resources. Members of any other department should not have access to the project. You need to configure this behavior.

What should you do to meet these requirements?

Create a Folder per department under the Organization. For each department's Folder, assign the Project Viewer role to the Google Group related to that department.
Create a Folder per department under the Organization. For each department's Folder, assign the Project Browser role to the Google Group related to that department.
Create a Project per department under the Organization. For each department's Project, assign the Project Viewer role to the Google Group related to that department.
Create a Project per department under the Organization. For each department's Project, assign the Project Browser role to the Google Group related to that department.

Answer(s): A

Explanation:

https://cloud.google.com/iam/docs/understanding-roles#project-roles

Reveal Solution Next Question

QUESTION: 38

A customer's internal security team must manage its own encryption keys for encrypting data on Cloud Storage and decides to use customer-supplied encryption keys (CSEK).

How should the team complete this task?

Upload the encryption key to a Cloud Storage bucket, and then upload the object to the same bucket.
Use the gsutil command line tool to upload the object to Cloud Storage, and specify the location of the encryption key.
Generate an encryption key in the Google Cloud Platform Console, and upload an object to Cloud Storage using the specified key.
Encrypt the object, then use the gsutil command line tool or the Google Cloud Platform Console to upload the object to Cloud Storage.

Answer(s): B

Explanation:

https://cloud.google.com/storage/docs/encryption/customer-supplied-keys#gsutil

Reveal Solution Next Question

QUESTION: 39

A customer has 300 engineers. The company wants to grant different levels of access and efficiently manage IAM permissions between users in the development and production environment projects.

Which two steps should the company take to meet these requirements? (Choose two.)

Create a project with multiple VPC networks for each environment.
Create a folder for each development and production environment.
Create a Google Group for the Engineering team, and assign permissions at the folder level.
Create an Organizational Policy constraint for each folder environment.
Create projects for each environment, and grant IAM rights to each engineering user.

Answer(s): B,C

Reveal Solution Next Question

QUESTION: 40

You want to evaluate GCP for PCI compliance. You need to identify Google's inherent controls.

Which document should you review to find the information?

Google Cloud Platform: Customer Responsibility Matrix
PCI DSS Requirements and Security Assessment Procedures
PCI SSC Cloud Computing Guidelines
Product documentation for Compute Engine

Answer(s): A

Explanation:

https://cloud.google.com/files/PCI_DSS_Shared_Responsibility_GCP_v32.pdf https://services.google.com/fh/files/misc/gcp_pci_shared_responsibility_matrix_aug_2021.pdf

Reveal Solution Next Question

Google PROFESSIONAL-CLOUD-SECURITY-ENGINEER Exam (page: 8) Google Professional Cloud Security Engineer Updated on: 12-Jan-2026

QUESTION: 36

QUESTION: 37

Explanation:

QUESTION: 38

Explanation:

QUESTION: 39

QUESTION: 40

Explanation:

Google PROFESSIONAL-CLOUD-SECURITY-ENGINEER Exam (page: 8)
Google Professional Cloud Security Engineer
Updated on: 12-Jan-2026