You are exporting application logs to Cloud Storage. You encounter an error message that the log sinks don't support uniform bucket-level access policies. How should you resolve this error?
Answer(s): A
https://sysdig.com/blog/gcp-security-best-practices/
You plan to deploy your cloud infrastructure using a CI/CD cluster hosted on Compute Engine. You want to minimize the risk of its credentials being stolen by a third party. What should you do?
Answer(s): C
You need to set up two network segments: one with an untrusted subnet and the other with a trusted subnet. You want to configure a virtual appliance such as a next-generation firewall (NGFW) to inspect all traffic between the two network segments. How should you design the network to inspect the traffic?
Answer(s): D
You want to reduce your Linux bastion host external attack surface by removing all public IP addresses. The site reliability engineers (SREs) at your organization require access to the bastion host from public locations so they can access the internal VPC while off-site. You need to enable access. What should you do?
https://cloud.google.com/architecture/building-internet-connectivity-for-private-vms
You need to enable VPC Service Controls and allow changes to perimeters in existing environments without preventing access to resources. Which VPC Service Controls mode should you use?
https://cloud.google.com/vpc-service-controls/docs/service-perimeters
Post your Comments and Discuss Google PROFESSIONAL CLOUD SECURITY ENGINEER exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the PROFESSIONAL CLOUD SECURITY ENGINEER content, but please register or login to continue.