Free PROFESSIONAL CLOUD SECURITY ENGINEER Exam Braindumps
Professional Cloud Security Engineer Questions 156–160 (page: 33)

Updated On: 10-Feb-2026

Your company plans to move most of its IT infrastructure to Google Cloud. They want to leverage their existing on-premises Active Directory as an identity provider for Google Cloud.
Which two steps should you take to integrate the company's on-premises Active Directory with Google Cloud and configure access management? (Choose two.)

  1. Use Identity Platform to provision users and groups to Google Cloud.
  2. Use Cloud Identity SAML integration to provision users and groups to Google Cloud.
  3. Install Google Cloud Directory Sync and connect it to Active Directory and Cloud Identity.
  4. Create Identity and Access Management (IAM) roles with permissions corresponding to each Active Directory group.
  5. Create Identity and Access Management (IAM) groups with permissions corresponding to each Active Directory group.

Answer(s): C,D



You are in charge of creating a new Google Cloud organization for your company.
Which two actions should you take when creating the super administrator accounts? (Choose two.)

  1. Create an access level in the Google Admin console to prevent super admin from logging in to Google Cloud.
  2. Disable any Identity and Access Management (IAM) roles for super admin at the organization level in the Google Cloud Console.
  3. Use a physical token to secure the super admin credentials with multi-factor authentication (MFA).
  4. Use a private connection to create the super admin accounts to avoid sending your credentials over the Internet.
  5. Provide non-privileged identities to the super admin users for their day-to-day activities.

Answer(s): C,E



You are deploying a web application hosted on Compute Engine. A business requirement mandates that application logs are preserved for 12 years and data is kept within European boundaries. You want to implement a storage solution that minimizes overhead and is cost-effective.
What should you do?

  1. Create a Cloud Storage bucket to store your logs in the EUROPE-WEST1 region. Modify your application code to ship logs directly to your bucket for increased efficiency.
  2. Configure your Compute Engine instances to use the Google Cloud's operations suite Cloud Logging agent to send application logs to a custom log bucket in the EUROPE-WEST1 region with a custom retention of 12 years.
  3. Use a Pub/Sub topic to forward your application logs to a Cloud Storage bucket in the EUROPE-WEST1 region.
  4. Configure a custom retention policy of 12 years on your Google Cloud's operations suite log bucket in the EUROPE-WEST1 region.

Answer(s): A



You discovered that sensitive personally identifiable information (PII) is being ingested to your Google Cloud environment in the daily ETL process from an on-premises environment to your BigQuery datasets. You need to redact this data to obfuscate the PII, but need to re-identify it for data analytics purposes.
Which components should you use in your solution? (Choose two.)

  1. Secret Manager
  2. Cloud Key Management Service
  3. Cloud Data Loss Prevention with cryptographic hashing
  4. Cloud Data Loss Prevention with automatic text redaction
  5. Cloud Data Loss Prevention with deterministic encryption using AES-SIV

Answer(s): B,E



You are working with a client that is concerned about control of their encryption keys for sensitive data. The client does not want to store encryption keys at rest in the same cloud service provider (CSP) as the data that the keys are encrypting.
Which Google Cloud encryption solutions should you recommend to this client? (Choose two.)

  1. Customer-supplied encryption keys
  2. Google default encryption
  3. Secret Manager
  4. Cloud External Key Manager
  5. Customer-managed encryption keys

Answer(s): A,D



Viewing page 33 of 74
Viewing questions 161 - 165 out of 376 questions


Post your Comments and Discuss Google PROFESSIONAL CLOUD SECURITY ENGINEER exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!