Professional-Cloud-Security-Engineer Exam Question 36
An application running on a Compute Engine instance needs to read data from a Cloud Storage bucket. Your team does not allow Cloud Storage buckets to be globally readable and wants to ensure the principle of least privilege.
Which option meets the requirement of your team?
Which option meets the requirement of your team?
Professional-Cloud-Security-Engineer Exam Question 37
Your company is concerned about unauthorized parties gaming access to the Google Cloud environment by using a fake login page. You must implement a solution to protect against person-in-the-middle attacks.
Which security measure should you use?
Which security measure should you use?
Professional-Cloud-Security-Engineer Exam Question 38
Your team uses a service account to authenticate data transfers from a given Compute Engine virtual machine instance of to a specified Cloud Storage bucket. An engineer accidentally deletes the service account, which breaks application functionality. You want to recover the application as quickly as possible without compromising security.
What should you do?
What should you do?
Professional-Cloud-Security-Engineer Exam Question 39
Which two implied firewall rules are defined on a VPC network? (Choose two.)
Professional-Cloud-Security-Engineer Exam Question 40
You are developing a new application that uses exclusively Compute Engine VMs Once a day. this application will execute five different batch jobs Each of the batch jobs requires a dedicated set of permissions on Google Cloud resources outside of your application. You need to design a secure access concept for the batch jobs that adheres to the least-privilege principle What should you do?