Online Access Free Google.Professional-Cloud-Security-Engineer.v2024-11-26.q142 Practice Test (Page 20)

Professional-Cloud-Security-Engineer Exam Question 91

You will create a new Service Account that should be able to list the Compute Engine instances in the project. You want to follow Google-recommended practices.
What should you do?

A.Create an Instance Template, and allow the Service Account Read Only access for the Compute Engine Access Scope.

B.Create a custom role with the permission compute.instances.list and grant the Service Account this role.

C.Give the Service Account the role of Compute Viewer, and use the new Service Account for all instances.

D.Give the Service Account the role of Project Viewer, and use the new Service Account for all instances.

Professional-Cloud-Security-Engineer Exam Question 92

Your organization wants to be General Data Protection Regulation (GDPR) compliant You want to ensure that your DevOps teams can only create Google Cloud resources in the Europe regions.
What should you do?

A.Use the org policy constraint "Restrict Resource Service Usage'* on your Google Cloud organization node.

B.Use Identity and Access Management (1AM) custom roles to ensure that your DevOps team can only create resources in the Europe regions

C.Use the org policy constraint Google Cloud Platform - Resource Location Restriction" on your Google Cloud organization node.

D.Use Identity-Aware Proxy (IAP) with Access Context Manager to restrict the location of Google Cloud resources.

Professional-Cloud-Security-Engineer Exam Question 93

An organization's typical network and security review consists of analyzing application transit routes, request handling, and firewall rules. They want to enable their developer teams to deploy new applications without the overhead of this full review.
How should you advise this organization?

A.Use Forseti with Firewall filters to catch any unwanted configurations in production.

B.Mandate use of infrastructure as code and provide static analysis in the CI/CD pipelines to enforce policies.

C.Route all VPC traffic through customer-managed routers to detect malicious patterns in production.

D.All production applications will run on-premises. Allow developers free rein in GCP as their dev and QA platforms.

Professional-Cloud-Security-Engineer Exam Question 94

You are asked to recommend a solution to store and retrieve sensitive configuration data from an application that runs on Compute Engine. Which option should you recommend?

A.Cloud Key Management Service

B.Compute Engine guest attributes

C.Compute Engine custom metadata

D.Secret Manager

Professional-Cloud-Security-Engineer Exam Question 95

A security team at an e-commerce company wants to define an automatic incident response process for fraudulent credit card usage attempts. The team targets a 10-minute or faster response time for such incidents. The fraudulent card list is updated every 60 seconds. The e- commerce servers log the transaction details in near-real time. Which option should you recommend to the security team?

A.Define a log-based metric for each fraudulent credit card, and set a Stackdriver alert for these metrics.

B.Maintain a log ingestion exclusion filter based on the fraudulent credit card lists.

C.Use AutoML to automatically build models based on the fraudulent credit card lists.

D.Create a new logging export with a filter to match the transaction and a sink pointing to a Cloud Pub/Sub topic.

Other Version: 549Google.Professional-Cloud-Security-Engineer.v2026-02-09.q123; 759Google.Professional-Cloud-Security-Engineer.v2025-12-26.q111; 1231Google.Professional-Cloud-Security-Engineer.v2023-10-27.q86; 1294Google.Professional-Cloud-Security-Engineer.v2023-03-25.q71; 1088Google.Professional-Cloud-Security-Engineer.v2023-03-10.q59; 103Google.Actualtests4sure.Professional-Cloud-Security-Engineer.v2022-05-23.by.clare.108q.pdf; 2508Google.Professional-Cloud-Security-Engineer.v2022-05-10.q108; 3003Google.Professional-Cloud-Security-Engineer.v2021-10-23.q83; 134Google.Ipassleader.Professional-Cloud-Security-Engineer.v2021-09-16.by.winston.77q.pdf

Latest Upload: 143CrowdStrike.CCSE-204.v2026-06-12.q25; 162VMware.2V0-17.25.v2026-06-12.q49; 150Appian.ACA-100.v2026-06-11.q23; 208CompTIA.220-1202.v2026-06-11.q114; 164CheckPoint.156-590.v2026-06-11.q47; 224CompTIA.220-1202.v2026-06-10.q109; 205CertiProf.CEHPC.v2026-06-10.q54; 152Hitachi.HQT-4160.v2026-06-10.q25; 403PMI.PMI-ACP-CN.v2026-06-09.q453; 192Splunk.SPLK-5002.v2026-06-08.q52

Professional-Cloud-Security-Engineer Exam Question 91

Professional-Cloud-Security-Engineer Exam Question 92

Professional-Cloud-Security-Engineer Exam Question 93

Professional-Cloud-Security-Engineer Exam Question 94

Professional-Cloud-Security-Engineer Exam Question 95

Download PDF File