Online Access Free Google.Professional-Cloud-Security-Engineer.v2021-10-23.q83 Practice Test (Page 3)

Professional-Cloud-Security-Engineer Exam Question 6

Your team needs to obtain a unified log view of all development cloud projects in your SIEM. The development projects are under the NONPROD organization folder with the test and pre-production projects. The development projects share the ABC-BILLING billing account with the rest of the organization.
Which logging export strategy should you use to meet the requirements?

A.1. Export logs to a Cloud Pub/Sub topic with folders/NONPROD parent and includeChildren property set to True in a dedicated SIEM project.2. Subscribe SIEM to the topic.

B.1. Create a Cloud Storage sink with billingAccounts/ABC-BILLING parent and includeChildren property set to False in a dedicated SIEM project.2. Process Cloud Storage objects in SIEM.

C.1. Create a Cloud Storage sink with a publicly shared Cloud Storage bucket in each project.2. Process Cloud Storage objects in SIEM.

D.1. Export logs in each dev project to a Cloud Pub/Sub topic in a dedicated SIEM project.2. Subscribe SIEM to the topic.

Professional-Cloud-Security-Engineer Exam Question 7

Your company has deployed an application on Compute Engine. The application is accessible by clients on port 587. You need to balance the load between the different instances running the application. The connection should be secured using TLS, and terminated by the Load Balancer.
What type of Load Balancing should you use?

A.Network Load Balancing

B.HTTP(S) Load Balancing

C.TCP Proxy Load Balancing

D.SSL Proxy Load Balancing

Professional-Cloud-Security-Engineer Exam Question 8

A customer needs to launch a 3-tier internal web application on Google Cloud Platform (GCP). The customer's internal compliance requirements dictate that end-user access may only be allowed if the traffic seems to originate from a specific known good CIDR. The customer accepts the risk that their application will only have SYN flood DDoS protection. They want to use GCP's native SYN flood protection.
Which product should be used to meet these requirements?

A.Cloud Armor

B.VPC Firewall Rules

C.Cloud Identity and Access Management

D.Cloud CDN

Professional-Cloud-Security-Engineer Exam Question 9

Your team creates an ingress firewall rule to allow SSH access from their corporate IP range to a specific bastion host on Compute Engine. Your team wants to make sure that this firewall rule cannot be used by unauthorized engineers who may otherwise have access to manage VMs in the development environment. What should your team do to meet this requirement?

A.Create the firewall rule with a target of a network tag. Centrally manage access to the tag.

B.Create the firewall rule with a target of a service account. Centrally manage access to the service account.

C.Create the firewall rule in a Shared VPC with a target of a network tag.

D.Create the firewall rule in a Shared VPC with a target of a specific subnet.

Professional-Cloud-Security-Engineer Exam Question 10

A large e-retailer is moving to Google Cloud Platform with its ecommerce website. The company wants to ensure payment information is encrypted between the customer's browser and GCP when the customers checkout online.
What should they do?

A.Configure an SSL Certificate on an L7 Load Balancer and require encryption.

B.Configure an SSL Certificate on a Network TCP Load Balancer and require encryption.

C.Configure the firewall to allow outbound traffic on port 443, and block all other outbound traffic.

D.Configure the firewall to allow inbound traffic on port 443, and block all other inbound traffic.

Other Version: 562Google.Professional-Cloud-Security-Engineer.v2026-02-09.q123; 769Google.Professional-Cloud-Security-Engineer.v2025-12-26.q111; 1230Google.Professional-Cloud-Security-Engineer.v2024-11-26.q142; 1239Google.Professional-Cloud-Security-Engineer.v2023-10-27.q86; 1310Google.Professional-Cloud-Security-Engineer.v2023-03-25.q71; 1097Google.Professional-Cloud-Security-Engineer.v2023-03-10.q59; 103Google.Actualtests4sure.Professional-Cloud-Security-Engineer.v2022-05-23.by.clare.108q.pdf; 2517Google.Professional-Cloud-Security-Engineer.v2022-05-10.q108; 134Google.Ipassleader.Professional-Cloud-Security-Engineer.v2021-09-16.by.winston.77q.pdf

Latest Upload: 160CompTIA.220-1202.v2026-06-16.q110; 112TheInstitutes.CPCU-500.v2026-06-16.q25; 156ACAMS.CAMS7-CN.v2026-06-16.q170; 183CBIC.CIC.v2026-06-15.q123; 128Peoplecert.ITIL-4-Specialist-High-velocity-IT.v2026-06-15.q16; 220HashiCorp.Terraform-Associate-004.v2026-06-15.q126; 130Peoplecert.ITILFNDv5.v2026-06-15.q26; 129Workday.Workday-Pro-HCM-Reporting.v2026-06-15.q28; 129Fortinet.NSE5_SSE_AD-7.6.v2026-06-15.q17; 324PMI.PMI-ACP.v2026-06-15.q523

Professional-Cloud-Security-Engineer Exam Question 6

Professional-Cloud-Security-Engineer Exam Question 7

Professional-Cloud-Security-Engineer Exam Question 8

Professional-Cloud-Security-Engineer Exam Question 9

Professional-Cloud-Security-Engineer Exam Question 10

Download PDF File