Professional-Cloud-Security-Engineer Exam Question 126

Your customer is moving their corporate applications to Google Cloud Platform. The security team wants detailed visibility of all resources in the organization. You use Resource Manager to set yourself up as the org admin. What Cloud Identity and Access Management (Cloud IAM) roles should you give to the security team?
  • Professional-Cloud-Security-Engineer Exam Question 127

    Your Security team believes that a former employee of your company gained unauthorized access to Google Cloud resources some time in the past 2 months by using a service account key. You need to confirm the unauthorized access and determine the user activity. What should you do?
  • Professional-Cloud-Security-Engineer Exam Question 128

    You want to evaluate GCP for PCI compliance. You need to identify Google's inherent controls.
    Which document should you review to find the information?
  • Professional-Cloud-Security-Engineer Exam Question 129

    Which two security characteristics are related to the use of VPC peering to connect two VPC networks?
    (Choose two.)
  • Professional-Cloud-Security-Engineer Exam Question 130

    Your team needs to make sure that a Compute Engine instance does not have access to the internet or to any Google APIs or services.
    Which two settings must remain disabled to meet these requirements? (Choose two.)