support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Google
  4. PROFESSIONAL CLOUD SECURITY ENGINEER

Free PROFESSIONAL CLOUD SECURITY ENGINEER Exam Braindumps
Professional Cloud Security Engineer Questions 166–170 (page: 35)

Updated On: 10-Feb-2026
Page 35 of 74
PDF with 376 Questions

You have been tasked with inspecting IP packet data for invalid or malicious content.
What should you do?

  1. Use Packet Mirroring to mirror traffic to and from particular VM instances. Perform inspection using security software that analyzes the mirrored traffic.
  2. Enable VPC Flow Logs for all subnets in the VPC. Perform inspection on the Flow Logs data using Cloud Logging.
  3. Configure the Fluentd agent on each VM Instance within the VP Perform inspection on the log data using Cloud Logging.
  4. Configure Google Cloud Armor access logs to perform inspection on the log data.

Answer(s): A



You have the following resource hierarchy. There is an organization policy at each node in the hierarchy as shown.
Which load balancer types are denied in VPC A?

  1. All load balancer types are denied in accordance with the global node's policy.
  2. INTERNAL_TCP_UDP, INTERNAL_HTTP_HTTPS is denied in accordance with the folder's policy.
  3. EXTERNAL_TCP_PROXY, EXTERNAL_SSL_PROXY are denied in accordance with the project's policy.
  4. EXTERNAL_TCP_PROXY, EXTERNAL_SSL_PROXY, INTERNAL_TCP_UDP, and INTERNAL_HTTP_HTTPS are denied in accordance with the folder and project's policies.

Answer(s): A



Your security team wants to implement a defense-in-depth approach to protect sensitive data stored in a Cloud Storage bucket. Your team has the following requirements:
The Cloud Storage bucket in Project A can only be readable from Project B.

The Cloud Storage bucket in Project A cannot be accessed from outside the network.

Data in the Cloud Storage bucket cannot be copied to an external Cloud Storage bucket.

What should the security team do?

  1. Enable domain restricted sharing in an organization policy, and enable uniform bucket-level access on the Cloud Storage bucket.
  2. Enable VPC Service Controls, create a perimeter around Projects A and B, and include the Cloud Storage API in the Service Perimeter configuration.
  3. Enable Private Access in both Project A and B's networks with strict firewall rules that allow communication between the networks.
  4. Enable VPC Peering between Project A and B's networks with strict firewall rules that allow communication between the networks.

Answer(s): B



You need to create a VPC that enables your security team to control network resources such as firewall rules. How should you configure the network to allow for separation of duties for network resources?

  1. Set up multiple VPC networks, and set up multi-NIC virtual appliances to connect the networks.
  2. Set up VPC Network Peering, and allow developers to peer their network with a Shared VPC.
  3. Set up a VPC in a project. Assign the Compute Network Admin role to the security team, and assign the Compute Admin role to the developers.
  4. Set up a Shared VPC where the security team manages the firewall rules, and share the network with developers via service projects.

Answer(s): D



You are onboarding new users into Cloud Identity and discover that some users have created consumer user accounts using the corporate domain name. How should you manage these consumer user accounts with Cloud Identity?

  1. Use Google Cloud Directory Sync to convert the unmanaged user accounts.
  2. Create a new managed user account for each consumer user account.
  3. Use the transfer tool for unmanaged user accounts.
  4. Configure single sign-on using a customer's third-party provider.

Answer(s): C



  PDF
Viewing page 35 of 74
Viewing questions 171 - 175 out of 376 questions


Post your Comments and Discuss Google PROFESSIONAL CLOUD SECURITY ENGINEER exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!