Question 1

Which of the following tools is used for auditing, monitoring, and analysis of resources in a Crowdfunding platform that uses Google Cloud Services?

Options :

A : The managed service for running Kubernetes clusters on Google Cloud is called Google Kubernetes Engine.

B : Storage services provided by Google Cloud.

C : Logging on Google Cloud Platform

D : The Google Cloud SQL is a fully-managed database service provided by Google Cloud Platform.

Answer: C

Question 2

You have the following resource hierarchy. There is an organization policy at each node in the hierarchy as shown. Which load balancer types are denied in VPC A?

Options :

A : All load balancer types are denied in accordance with the global node-s policy.

B : INTERNAL_TCP_UDP, INTERNAL_HTTP_HTTPS is denied in accordance with the folder-s policy.

C : EXTERNAL_TCP_PROXY, EXTERNAL_SSL_PROXY are denied in accordance with the project-s policy.

D : EXTERNAL TCP_PROXY, EXTERNAL_SSL_PROXY, INTERNAL TCP_UDP, and INTERNAL_HTTP_HTTPS are denied in accordance with the folder and project-s policies.

Answer: D

Question 3

Your company plans to move most of its IT infrastructure to Google Cloud. They want to leverage their existing on-premises Active Directory as an identity provider for Google Cloud. Which two steps should you take to integrate the company’s on-premises Active Directory with Google Cloud and configure access management? (Choose two.)

Options :

A : Use Identity Platform to provision users and groups to Google Cloud.

B : Use Cloud Identity SAML integration to provision users and groups to Google Cloud.

C : Install Google Cloud Directory Sync and connect it to Active Directory and Cloud Identity.

D : Create Identity and Access Management (1AM) roles with permissions corresponding to each Active Directory group.

E : Create Identity and Access Management (1AM) groups with permissions corresponding to each Active Directory group.

Answer: C,E

Question 4

A customer’s company has multiple business units. Each business unit operates independently, and each has their own engineering group. Your team wants visibility into all projects created within the company and wants to organize their Google Cloud Platform (GCP) projects based on different business units. Each business unit also requires separate sets of IAM permissions. Which strategy should you use to meet these needs?

Options :

A : Create an organization node, and assign folders for each business unit.

B : Establish standalone projects for each business unit, using gmail.com accounts.

C : Assign GCP resources in a project, with a label identifying which business unit owns the resource.

D : Assign GCP resources in a VPC for each business unit to separate network access.

Answer: A

Question 5

An employer wants to track how bonus compensations have changed over time to identify employee outliersand correct earning disparities. This task must be performed without exposing the sensitive compensation datafor any individual and must be reversible to identify the outlier.Which Cloud Data Loss Prevention API technique should you use to accomplish this?

Options :

A : Generalization

B : Redaction

C : CryptoHashConfig

D : CryptoReplaceFfxFpeConfig

Answer: D

Free Professional-Cloud-Security-Engineer Mock Exam – Practice Online Confidently

Buying Options: