You want data on Compute Engine disks to be encrypted at rest with keys managed by Cloud Key ManagementService (KMS). Cloud Identity and Access Management (IAM) permissions to these keys must be managed in a grouped way because the permissions should be the same for all keys.What should you do?
Answer(s): B
A company is backing up application logs to a Cloud Storage bucket shared with both analysts and the administrator. Analysts should only have access to logs that do not contain any personally identifiable information (PII). Log files containing PII should be stored in another bucket that is only accessible by the administrator.What should you do?
Answer(s): A
A customer terminates an engineer and needs to make sure the engineer's Google account is automatically deprovisioned.What should the customer do?
Answer(s): C
An organization is evaluating the use of Google Cloud Platform (GCP) for certain IT workloads. A well- established directory service is used to manage user identities and lifecycle management. This directory service must continue for the organization to use as the "source of truth" directory for identities.Which solution meets the organization's requirements?
https://cloud.google.com/solutions/federating-gcp-with-active-directory-introduction
Which international compliance standard provides guidelines for information security controls applicable to the provision and use of cloud services?
Create a new Service Account that should be able to list the Compute Engine instances in the project. You want to follow Google-recommended practices.
Post your Comments and Discuss Google PROFESSIONAL CLOUD SECURITY ENGINEER exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the PROFESSIONAL CLOUD SECURITY ENGINEER content, but please register or login to continue.