Professional-Cloud-Security-Engineer試験無料問題集「Google Cloud Certified - Professional Cloud Security Engineer 認定」
You are tasked with exporting and auditing security logs for login activity events for Google Cloud console and API calls that modify configurations to Google Cloud resources. Your export must meet the following requirements:
- Export related logs for all projects in the Google Cloud organization.
- Export logs in near real-time to an external SIEM.
What should you do? (Choose two.)
- Export related logs for all projects in the Google Cloud organization.
- Export logs in near real-time to an external SIEM.
What should you do? (Choose two.)
正解：B,D
解答を投票する
解説: (GoShiken メンバーにのみ表示されます)
Your company runs a website that will store PII on Google Cloud Platform. To comply with data privacy regulations, this data can only be stored for a specific amount of time and must be fully deleted after this specific period. Data that has not yet reached the time period should not be deleted. You want to automate the process of complying with this regulation.
What should you do?
What should you do?
正解：D
解答を投票する
解説: (GoShiken メンバーにのみ表示されます)
When working with agents in a support center via online chat, an organization's customers often share pictures of their documents with personally identifiable information (PII). The organization that owns the support center is concerned that the PII is being stored in their databases as part of the regular chat logs they retain for review by internal or external analysts for customer service trend analysis.
Which Google Cloud solution should the organization use to help resolve this concern for the customer while still maintaining data utility?
Which Google Cloud solution should the organization use to help resolve this concern for the customer while still maintaining data utility?
正解：B
解答を投票する
解説: (GoShiken メンバーにのみ表示されます)
Your security team wants to reduce the risk of user-managed keys being mismanaged and compromised. To achieve this, you need to prevent developers from creating user-managed service account keys for projects in their organization. How should you enforce this?
正解：D
解答を投票する
解説: (GoShiken メンバーにのみ表示されます)
Your organization hosts a financial services application running on Compute Engine instances for a third-party company. The third-party company's servers that will consume the application also run on Compute Engine in a separate Google Cloud organization. You need to configure a secure network connection between the Compute Engine instances. You have the following requirements:
- The network connection must be encrypted.
- The communication between servers must be over private IP addresses.
What should you do?
- The network connection must be encrypted.
- The communication between servers must be over private IP addresses.
What should you do?
正解：C
解答を投票する
解説: (GoShiken メンバーにのみ表示されます)
A company is deploying their application on Google Cloud Platform. Company policy requires long-term data to be stored using a solution that can automatically replicate data over at least two geographic places.
Which Storage solution are they allowed to use?
Which Storage solution are they allowed to use?
正解：A
解答を投票する
解説: (GoShiken メンバーにのみ表示されます)
You need to implement an encryption-at-rest strategy that protects sensitive data and reduces key management complexity for non-sensitive data. Your solution has the following requirements:
- Schedule key rotation for sensitive data.
- Control which region the encryption keys for sensitive data are stored in.
- Minimize the latency to access encryption keys for both sensitive and non-sensitive data.
What should you do?
- Schedule key rotation for sensitive data.
- Control which region the encryption keys for sensitive data are stored in.
- Minimize the latency to access encryption keys for both sensitive and non-sensitive data.
What should you do?
正解：A
解答を投票する
解説: (GoShiken メンバーにのみ表示されます)
A customer wants to use Cloud Identity as their primary IdP. The customer wants to use other non-GCP SaaS products for CRM, messaging, and customer ticketing management. The customer also wants to improve employee experience with Single Sign-On (SSO) capabilities to securely access GCP and non-GCP applications. Only authorized individuals should be able to access these third-party applications. What action should the customer take to meet these requirements?
正解：C
解答を投票する
解説: (GoShiken メンバーにのみ表示されます)
Your organization is migrating a sensitive data processing workflow from on-premises infrastructure to Google Cloud. This workflow involves the collection, storage, and analysis of customer information that includes personally identifiable information (PII). You need to design security measures to mitigate the risk of data exfiltration in this new cloud environment. What should you do?
正解：A
解答を投票する
You need to provide a corporate user account in Google Cloud for each of your developers and operational staff who need direct access to GCP resources. Corporate policy requires you to maintain the user identity in a third-party identity management provider and leverage single sign- on. You learn that a significant number of users are using their corporate domain email addresses for personal Google accounts, and you need to follow Google recommended practices to convert existing unmanaged users to managed accounts.
Which two actions should you take? (Choose two.)
Which two actions should you take? (Choose two.)
正解：C,E
解答を投票する
解説: (GoShiken メンバーにのみ表示されます)
You manage your organization's Security Operations Center (SOC). You currently monitor and detect network traffic anomalies in your Google Cloud VPCs based on packet header information.
However, you want the capability to explore network flows and their payload to aid investigations.
Which Google Cloud product should you use?
However, you want the capability to explore network flows and their payload to aid investigations.
Which Google Cloud product should you use?
正解：D
解答を投票する
解説: (GoShiken メンバーにのみ表示されます)