support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Google
  4. PROFESSIONAL CLOUD SECURITY ENGINEER

Free PROFESSIONAL CLOUD SECURITY ENGINEER Exam Braindumps
Professional Cloud Security Engineer Questions 126–130 (page: 27)

Updated On: 10-Feb-2026
Page 27 of 74
PDF with 376 Questions

Which type of load balancer should you use to maintain client IP by default while using the standard network tier?

  1. SSL Proxy
  2. TCP Proxy
  3. Internal TCP/UDP
  4. TCP/UDP Network

Answer(s): D



You want to prevent users from accidentally deleting a Shared VPC host project.
Which organization-level policy constraint should you enable?

  1. compute.restrictSharedVpcHostProjects
  2. compute.restrictXpnProjectLienRemoval
  3. compute.restrictSharedVpcSubnetworks
  4. compute.sharedReservationsOwnerProjects

Answer(s): B


Reference:

https://cloud.google.com/vpc/docs/provisioning-shared-vpc



Users are reporting an outage on your public-facing application that is hosted on Compute Engine. You suspect that a recent change to your firewall rules is responsible. You need to test whether your firewall rules are working properly.
What should you do?

  1. Enable Firewall Rules Logging on the latest rules that were changed. Use Logs Explorer to analyze whether the rules are working correctly.
  2. Connect to a bastion host in your VPC. Use a network traffic analyzer to determine at which point your requests are being blocked.
  3. In a pre-production environment, disable all firewall rules individually to determine which one is blocking user traffic.
  4. Enable VPC Flow Logs in your VPC. Use Logs Explorer to analyze whether the rules are working correctly.

Answer(s): A


Reference:

https://cloud.google.com/vpc/docs/using-flow-logs



You are a security administrator at your company. Per Google-recommended best practices, you implemented the domain restricted sharing organization policy to allow only required domains to access your projects. An engineering team is now reporting that users at an external partner outside your organization domain cannot be granted access to the resources in a project. How should you make an exception for your partner's domain while following the stated best practices?

  1. Turn off the domain restriction sharing organization policy. Set the policy value to "Allow All."
  2. Turn off the domain restricted sharing organization policy. Provide the external partners with the required permissions using Google's Identity and Access Management (IAM) service.
  3. Turn off the domain restricted sharing organization policy. Add each partner's Google Workspace customer ID to a Google group, add the Google group as an exception under the organization policy, and then turn the policy back on.
  4. Turn off the domain restricted sharing organization policy. Set the policy value to "Custom." Add each external partner's Cloud Identity or Google Workspace customer ID as an exception under the organization policy, and then turn the policy back on.

Answer(s): D



You plan to use a Google Cloud Armor policy to prevent common attacks such as cross-site scripting (XSS) and SQL injection (SQLi) from reaching your web application's backend.
What are two requirements for using Google Cloud Armor security policies? (Choose two.)

  1. The load balancer must be an external SSL proxy load balancer.
  2. Google Cloud Armor Policy rules can only match on Layer 7 (L7) attributes.
  3. The load balancer must use the Premium Network Service Tier.
  4. The backend service's load balancing scheme must be EXTERNAL.
  5. The load balancer must be an external HTTP(S) load balancer.

Answer(s): D,E



  PDF
Viewing page 27 of 74
Viewing questions 131 - 135 out of 376 questions


Post your Comments and Discuss Google PROFESSIONAL CLOUD SECURITY ENGINEER exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!