Online Access Free Google.Professional-Cloud-Security-Engineer.v2024-11-26.q142 Practice Test (Page 28)

Professional-Cloud-Security-Engineer Exam Question 131

Your company runs a website that will store PII on Google Cloud Platform. To comply with data privacy regulations, this data can only be stored for a specific amount of time and must be fully deleted after this specific period. Data that has not yet reached the time period should not be deleted. You want to automate the process of complying with this regulation.
What should you do?

A.Store the data in a single Persistent Disk, and delete the disk at expiration time.

B.Store the data in a single BigQuery table and set the appropriate table expiration time.

C.Store the data in a Cloud Storage bucket, and configure the bucket's Object Lifecycle Management feature.

D.Store the data in a single BigTable table and set an expiration time on the column families.

Professional-Cloud-Security-Engineer Exam Question 132

Your organization has implemented synchronization and SAML federation between Cloud Identity and Microsoft Active Directory. You want to reduce the risk of Google Cloud user accounts being compromised. What should you do?

A.Create an Active Directory domain password policy with strong password settings, and configure post-SSO (single sign-on) 2-Step Verification with verification codes via text or phone call in the Google Admin console.

B.Create a Cloud Identity password policy with strong password settings, and configure 2-Step Verification with verification codes via text or phone call in the Google Admin console.

C.Create an Active Directory domain password policy with strong password settings, and configure post-SSO (single sign-on) 2-Step Verification with security keys in the Google Admin console.

D.Create a Cloud Identity password policy with strong password settings, and configure 2-Step Verification with security keys in the Google Admin console.

Professional-Cloud-Security-Engineer Exam Question 133

Your team wants to make sure Compute Engine instances running in your production project do not have public IP addresses. The frontend application Compute Engine instances will require public IPs. The product engineers have the Editor role to modify resources. Your team wants to enforce this requirement.
How should your team meet these requirements?

A.Enable Private Access on the VPC network in the production project.

B.Remove the Editor role and grant the Compute Admin IAM role to the engineers.

C.Set up an organization policy to only permit public IPs for the front-end Compute Engine instances.

D.Set up a VPC network with two subnets: one with public IPs and one without public IPs.

Professional-Cloud-Security-Engineer Exam Question 134

You are the security admin of your company. Your development team creates multiple GCP projects under the "implementation" folder for several dev, staging, and production workloads. You want to prevent data exfiltration by malicious insiders or compromised code by setting up a security perimeter. However, you do not want to restrict communication between the projects.
What should you do?

A.Use an infrastructure-as-code software tool to set up a single service perimeter and to deploy a Cloud Function that monitors the "implementation" folder via Stackdriver and Cloud Pub/Sub. When the function notices that a new project is added to the folder, it executes Terraform to add the new project to the associated perimeter.

B.Create access levels in Access Context Manager to prevent data exfiltration, and use a shared VPC for communication between projects.

C.Use a Shared VPC to enable communication between all projects, and use firewall rules to prevent data exfiltration.

D.Use an infrastructure-as-code software tool to set up three different service perimeters for dev, staging, and prod and to deploy a Cloud Function that monitors the "implementation" folder via Stackdriver and Cloud Pub/Sub. When the function notices that a new project is added to the folder, it executes Terraform to add the new project to the respective perimeter.

Professional-Cloud-Security-Engineer Exam Question 135

Your company's new CEO recently sold two of the company's divisions. Your Director asks you to help migrate the Google Cloud projects associated with those divisions to a new organization node. Which preparation steps are necessary before this migration occurs? (Choose two.)

A.Remove all project-level custom Identity and Access Management (1AM) roles.

B.Disallow inheritance of organization policies.

C.Remove the specific migration projects from any VPC Service Controls perimeters and bridges.

D.Create a new folder for all projects to be migrated.

E.Identify inherited Identity and Access Management (1AM) roles on projects to be migrated.

Other Version: 536Google.Professional-Cloud-Security-Engineer.v2026-02-09.q123; 726Google.Professional-Cloud-Security-Engineer.v2025-12-26.q111; 1213Google.Professional-Cloud-Security-Engineer.v2023-10-27.q86; 1265Google.Professional-Cloud-Security-Engineer.v2023-03-25.q71; 1068Google.Professional-Cloud-Security-Engineer.v2023-03-10.q59; 103Google.Actualtests4sure.Professional-Cloud-Security-Engineer.v2022-05-23.by.clare.108q.pdf; 2489Google.Professional-Cloud-Security-Engineer.v2022-05-10.q108; 2993Google.Professional-Cloud-Security-Engineer.v2021-10-23.q83; 134Google.Ipassleader.Professional-Cloud-Security-Engineer.v2021-09-16.by.winston.77q.pdf

Latest Upload: 149Oracle.1D0-1057-25-D.v2026-06-03.q29; 276NAHQ.CPHQ.v2026-06-03.q396; 256CompTIA.220-1201.v2026-06-03.q196; 159GIAC.GCFE.v2026-06-03.q78; 156HIMSS.CPHIMS.v2026-06-03.q45; 235Google.Professional-Cloud-Architect.v2026-06-03.q165; 161HP.HPE7-A09.v2026-06-02.q48; 171ACDIS.CCDS-O.v2026-06-02.q56; 152Microsoft.AB-730.v2026-06-02.q31; 230ASQ.CSSBB.v2026-06-02.q130

Professional-Cloud-Security-Engineer Exam Question 131

Professional-Cloud-Security-Engineer Exam Question 132

Professional-Cloud-Security-Engineer Exam Question 133

Professional-Cloud-Security-Engineer Exam Question 134

Professional-Cloud-Security-Engineer Exam Question 135

Download PDF File