Online Access Free Google.Professional-Cloud-Security-Engineer.v2024-11-26.q142 Practice Test (Page 2)

Professional-Cloud-Security-Engineer Exam Question 1

You are the Security Admin in your company. You want to synchronize all security groups that have an email address from your LDAP directory in Cloud IAM.
What should you do?

A.Configure Google Cloud Directory Sync to sync security groups using LDAP search rules that have
"user email address" as the attribute to facilitate one-way sync.

B.Configure Google Cloud Directory Sync to sync security groups using LDAP search rules that have
"user email address" as the attribute to facilitate bidirectional sync.

C.Use a management tool to sync the subset based on the email address attribute. Create a group in the Google domain. A group created in a Google domain will automatically have an explicit Google Cloud Identity and Access Management (IAM) role.

D.Use a management tool to sync the subset based on group object class attribute. Create a group in the Google domain. A group created in a Google domain will automatically have an explicit Google Cloud Identity and Access Management (IAM) role.

Professional-Cloud-Security-Engineer Exam Question 2

You need to create a VPC that enables your security team to control network resources such as firewall rules.
How should you configure the network to allow for separation of duties for network resources?

A.Set up multiple VPC networks, and set up multi-NIC virtual appliances to connect the networks.

B.Set up VPC Network Peering, and allow developers to peer their network with a Shared VPC.

C.Set up a VPC in a project. Assign the Compute Network Admin role to the security team, and assign the Compute Admin role to the developers.

D.Set up a Shared VPC where the security team manages the firewall rules, and share the network with developers via service projects.

Professional-Cloud-Security-Engineer Exam Question 3

Your organization is using GitHub Actions as a continuous integration and delivery (Cl/CD) platform. You must enable access to Google Cloud resources from the Cl/CD pipelines in the most secure way.
What should you do?

A.Create a service account key and add it to the GitHub pipeline configuration file.

B.Create a service account key and add it to the GitHub repository content.

C.Configure workload identity federation to use GitHub as an identity pool provider.

D.Configure a Google Kubernetes Engine cluster that uses Workload Identity to supply credentials to GitHub.

Professional-Cloud-Security-Engineer Exam Question 4

How should a customer reliably deliver Stackdriver logs from GCP to their on-premises SIEM system?

A.Send all logs to the SIEM system via an existing protocol such as syslog.

B.Configure every project to export all their logs to a common BigQuery DataSet, which will be queried by the SIEM system.

C.Configure Organizational Log Sinks to export logs to a Cloud Pub/Sub Topic, which will be sent to the SIEM via Dataflow.

D.Build a connector for the SIEM to query for all logs in real time from the GCP RESTful JSON APIs.

Professional-Cloud-Security-Engineer Exam Question 5

Your company is storing sensitive data in Cloud Storage. You want a key generated on-premises to be used in the encryption process.
What should you do?

A.Use the Cloud Key Management Service to manage a data encryption key (DEK).

B.Use the Cloud Key Management Service to manage a key encryption key (KEK).

C.Use customer-supplied encryption keys to manage the data encryption key (DEK).

D.Use customer-supplied encryption keys to manage the key encryption key (KEK).

Other Version: 748Google.Professional-Cloud-Security-Engineer.v2023-10-27.q86; 923Google.Professional-Cloud-Security-Engineer.v2023-03-25.q71; 801Google.Professional-Cloud-Security-Engineer.v2023-03-10.q59; 102Google.Actualtests4sure.Professional-Cloud-Security-Engineer.v2022-05-23.by.clare.108q.pdf; 1993Google.Professional-Cloud-Security-Engineer.v2022-05-10.q108; 2672Google.Professional-Cloud-Security-Engineer.v2021-10-23.q83; 130Google.Ipassleader.Professional-Cloud-Security-Engineer.v2021-09-16.by.winston.77q.pdf

Latest Upload: 107Salesforce.ADM-201.v2025-09-06.q260; 104Oracle.1Z0-1055-23.v2025-09-06.q48; 104Cisco.010-151.v2025-09-06.q130; 130PMI.PMI-PBA.v2025-09-05.q160; 139Salesforce.Advanced-Cross-Channel.v2025-09-04.q41; 134EC-COUNCIL.312-40.v2025-09-04.q87; 148Oracle.1Z1-591.v2025-09-03.q129; 129Oracle.1z0-1065-25.v2025-09-03.q26; 162Cisco.350-701.v2025-09-03.q218; 126Oracle.1Z0-1195-25.v2025-09-03.q20

Professional-Cloud-Security-Engineer Exam Question 1

Professional-Cloud-Security-Engineer Exam Question 2

Professional-Cloud-Security-Engineer Exam Question 3

Professional-Cloud-Security-Engineer Exam Question 4

Professional-Cloud-Security-Engineer Exam Question 5

Download PDF File