Free PROFESSIONAL CLOUD SECURITY ENGINEER Exam Braindumps
Professional Cloud Security Engineer Questions 141–145 (page: 30)

Updated On: 10-Feb-2026

You have been tasked with configuring Security Command Center for your organization's Google Cloud environment. Your security team needs to receive alerts of potential crypto mining in the organization's compute environment and alerts for common Google Cloud misconfigurations that impact security.
Which Security Command Center features should you use to configure these alerts? (Choose two.)

  1. Event Threat Detection
  2. Container Threat Detection
  3. Security Health Analytics
  4. Cloud Data Loss Prevention
  5. Google Cloud Armor

Answer(s): A,C



You have noticed an increased number of phishing attacks across your enterprise user accounts. You want to implement the Google 2-Step Verification (2SV) option that uses a cryptographic signature to authenticate a user and verify the URL of the login page.
Which Google 2SV option should you use?

  1. Titan Security Keys
  2. Google prompt
  3. Google Authenticator app
  4. Cloud HSM keys

Answer(s): A



Your organization hosts a financial services application running on Compute Engine instances for a third-party company. The third-party company's servers that will consume the application also run on Compute Engine in a separate Google Cloud organization. You need to configure a secure network connection between the Compute Engine instances. You have the following requirements:
The network connection must be encrypted.

The communication between servers must be over private IP addresses.

What should you do?

  1. Configure a Cloud VPN connection between your organization's VPC network and the third party's that is controlled by VPC firewall rules.
  2. Configure a VPC peering connection between your organization's VPC network and the third party's that is controlled by VPC firewall rules.
  3. Configure a VPC Service Controls perimeter around your Compute Engine instances, and provide access to the third party via an access level.
  4. Configure an Apigee proxy that exposes your Compute Engine-hosted application as an API, and is encrypted with TLS which allows access only to the third party.

Answer(s): B



The new CEO of your organization recently sold two of the organization's divisions. You are migrating the Google Cloud projects associated with those divisions to a new organization node. You need to complete the necessary preparation step before the migration can occur.

What should you do?

  1. Remove all project-level custom Identity and Access Management (IAM) roles.
  2. Disallow inheritance of organization policies.
  3. Identify inherited Identity and Access Management (IAM) roles on projects to be migrated.
  4. Create a new folder for all projects to be migrated.

Answer(s): C



You are a consultant for an organization that is considering migrating their data from its private cloud to Google Cloud. The organization's compliance team is not familiar with Google Cloud and needs guidance on how compliance requirements will be met on Google Cloud. One specific compliance requirement is for customer data at rest to reside within specific geographic boundaries.
Which option should you recommend for the organization to meet their data residency requirements on Google Cloud?

  1. Organization Policy Service constraints
  2. Shielded VM instances
  3. Access control lists
  4. Geolocation access controls
  5. Google Cloud Armor

Answer(s): A



Viewing page 30 of 74
Viewing questions 146 - 150 out of 376 questions


Post your Comments and Discuss Google PROFESSIONAL CLOUD SECURITY ENGINEER exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!