support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Google
  4. PROFESSIONAL CLOUD SECURITY ENGINEER

Free PROFESSIONAL CLOUD SECURITY ENGINEER Exam Braindumps
Professional Cloud Security Engineer Questions 176–180 (page: 37)

Updated On: 10-Feb-2026
Page 37 of 74
PDF with 376 Questions

You need to enforce a security policy in your Google Cloud organization that prevents users from exposing objects in their buckets externally. There are currently no buckets in your organization.
Which solution should you implement proactively to achieve this goal with the least operational overhead?

  1. Create an hourly cron job to run a Cloud Function that finds public buckets and makes them private.
  2. Enable the constraints/storage.publicAccessPrevention constraint at the organization level.
  3. Enable the constraints/storage.uniformBucketLevelAccess constraint at the organization level.
  4. Create a VPC Service Controls perimeter that protects the storage.googleapis.com service in your projects that contains buckets. Add any new project that contains a bucket to the perimeter.

Answer(s): B



Your company requires the security and network engineering teams to identify all network anomalies and be able to capture payloads within VPCs.
Which method should you use?

  1. Define an organization policy constraint.
  2. Configure packet mirroring policies.
  3. Enable VPC Flow Logs on the subnet.
  4. Monitor and analyze Cloud Audit Logs.

Answer(s): B



An organization wants to track how bonus compensations have changed over time to identify employee outliers and correct earning disparities. This task must be performed without exposing the sensitive compensation data for any individual and must be reversible to identify the outlier.

Which Cloud Data Loss Prevention API technique should you use?

  1. Cryptographic hashing
  2. Redaction
  3. Format-preserving encryption
  4. Generalization

Answer(s): C



You need to set up a Cloud Interconnect connection between your company's on-premises data center and VPC host network. You want to make sure that on-premises applications can only access Google APIs over the Cloud Interconnect and not through the public internet. You are required to only use APIs that are supported by VPC Service Controls to mitigate against exfiltration risk to non-supported APIs. How should you configure the network?

  1. Enable Private Google Access on the regional subnets and global dynamic routing mode.
  2. Create a CNAME to map *.googleapis.com to restricted.googleapis.com, and create A records for restricted.googleapis.com mapped to 199.36.153.8/30.
  3. Use private.googleapis.com to access Google APIs using a set of IP addresses only routable from within Google Cloud, which are advertised as routes over the connection.
  4. Use restricted googleapis.com to access Google APIs using a set of IP addresses only routable from within Google Cloud, which are advertised as routes over the Cloud Interconnect connection.

Answer(s): D



Your organization develops software involved in many open source projects and is concerned about software supply chain threats. You need to deliver provenance for the build to demonstrate the software is untampered.

What should you do?

  1. 1. Hire an external auditor to review and provide provenance.
    2. Define the scope and conditions.
    3. Get support from the Security department or representative.
    4. Publish the attestation to your public web page.
  2. 1. Review the software process.
    2. Generate private and public key pairs and use Pretty Good Privacy (PGP) protocols to sign the output software artifacts together with a file containing the address of your enterprise and point of contact.
    3. Publish the PGP signed attestation to your public web page.
  3. 1. Publish the software code on GitHub as open source.
    2. Establish a bug bounty program, and encourage the open source community to review, report, and fix the vulnerabilities.
  4. 1. Generate Supply Chain Levels for Software Artifacts (SLSA) level 3 assurance by using Cloud Build.
    2. View the build provenance in the Security insights side panel within the Google Cloud console.

Answer(s): D



  PDF
Viewing page 37 of 74
Viewing questions 181 - 185 out of 376 questions


Post your Comments and Discuss Google PROFESSIONAL CLOUD SECURITY ENGINEER exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!