File Info
| Exam | Professional Cloud Security Engineer |
| Number | Professional-Cloud-Security-Engineer |
| File Name | Google.Professional-Cloud-Security-Engineer.Dump4Pass.2020-11-13.96q.tqb |
| Size | 437 KB |
| Posted | Nov 13, 2020 |
| Download | Google.Professional-Cloud-Security-Engineer.Dump4Pass.2020-11-13.96q.tqb |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
Your team needs to make sure that a Compute Engine instance does not have access to the internet or to any Google APIs or services.
Which two settings must remain disabled to meet these requirements? (Choose two.)
- Public IP
- IP Forwarding
- Private Google Access
- Static routes
- IAM Network User Role
Correct answer: AC
Question 2
Which two implied firewall rules are defined on a VPC network? (Choose two.)
- A rule that allows all outbound connections
- A rule that denies all inbound connections
- A rule that blocks all inbound port 25 connections
- A rule that blocks all outbound connections
- A rule that allows all inbound port 80 connections
Correct answer: AB
Explanation:
Reference: https://cloud.google.com/vpc/docs/firewalls Reference: https://cloud.google.com/vpc/docs/firewalls
Question 3
A customer needs an alternative to storing their plain text secrets in their source-code management (SCM) system.
How should the customer achieve this using Google Cloud Platform?
- Use Cloud Source Repositories, and store secrets in Cloud SQL.
- Encrypt the secrets with a Customer-Managed Encryption Key (CMEK), and store them in Cloud Storage.
- Run the Cloud Data Loss Prevention API to scan the secrets, and store them in Cloud SQL.
- Deploy the SCM to a Compute Engine VM with local SSDs, and enable preemptible VMs.
Correct answer: A
