2020 Latest Google Professional-Cloud-Security-Engineer Exam Questions
                      Google Cloud Certified - Professional Cloud Security Engineer
Professional-Cloud-Security-Engineer Dumps
Click here for more information:
https://www.realexamcollection.com/google/professional-cloud-security-engine
er-dumps.html
Sample Question:1
A DevOps team will create a new container to run on Google Kubernetes Engine. As 
the application will be internet-facing, they want to minimize the attack surface of the 
container.
What should they do?
A. Use Cloud Build to build the container images.
B. Build small containers using small base images.
C. Delete non-used versions from Container Registry.
D. Use a Continuous Delivery tool to deploy the application.
Answer: D
https://www.realexamcollection.com/google/professional-cloud-security-engineer-dum
ps.html
Sample Question:2
While migrating your organization’s infrastructure to GCP, a large number of users will 
need to access GCP Console. The Identity Management team already has a well-
established way to manage your users and want to keep using your existing Active 
Directory or LDAP server along with the existing SSO password.
What should you do?
A. Manually synchronize the data in Google domain with your existing Active Directory or 
LDAP server.
B. Use Google Cloud Directory Sync to synchronize the data in Google domain with your 
existing Active Directory or LDAP server.
C. Users sign in directly to the GCP Console using the credentials from your on-premises 
Kerberos compliant identity provider.
D. Users sign in using OpenID (OIDC) compatible IdP, receive an authentication token, 
then use that token to log in to the GCP Console.
Answer: B
https://www.realexamcollection.com/google/professional-cloud-security-engineer-
dumps.html
Sample Question:3
A website design company recently migrated all customer sites to App Engine. Some sites 
are still in progress and should only be visible to customers and company employees from 
any location.
Which solution will restrict access to the in-progress sites?
A. Upload an .htaccess file containing the customer and employee user accounts to App 
Engine.
B. Create an App Engine firewall rule that allows access from the customer and employee 
networks and denies all other traffic.
C. Enable Cloud Identity-Aware Proxy (IAP), and allow access to a Google Group that 
contains the customer and employee user accounts.
D. Use Cloud VPN to create a VPN connection between the relevant on-premises 
networks and the company’s GCP Virtual Private Cloud (VPC) network.
Answer: C
https://www.realexamcollection.com/google/professional-cloud-security-engineer-du
mps.html
Sample Question:4
Your company is using GSuite and has developed an application meant for internal usage 
on Google App Engine. You need to make sure that an external user cannot gain access to 
the application even when an employee’s password has been compromised.
What should you do?
A. Enforce 2-factor authentication in GSuite for all users.
B. Configure Cloud Identity-Aware Proxy for the App Engine Application.
C. Provision user passwords using GSuite Password Sync.
D. Configure Cloud VPN between your private network and GCP.
Answer: D
https://www.realexamcollection.com/google/professional-cloud-security-engineer-dum
ps.html
Sample Question:5
A customer has 300 engineers. The company wants to grant different levels of access 
and efficiently manage IAM permissions between users in the development and 
production environment projects.
Which two steps should the company take to meet these requirements? (Choose two.)
A. Create a project with multiple VPC networks for each environment.
B. Create a folder for each development and production environment.
C. Create a Google Group for the Engineering team, and assign permissions at the folder 
level.
D. Create an Organizational Policy constraint for each folder environment.
E. Create projects for each environment, and grant IAM rights to each engineering user.
Answer: B D
https://www.realexamcollection.com/google/professional-cloud-security-engine
er-dumps.html
 Google Cloud Certified - Professional Cloud Security Engineer
Professional-Cloud-Security-Engineer Dumps
Click here for more information:
https://www.realexamcollection.com/google/professional-cloud-security-engi
neer-dumps.html