Google’s Trusted Infrastructure CLOUD-DIGITAL-LEADER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which Google Cloud product is specifically designed to protect applications from DDoS attacks?

   • ACloud Functions
   • BCloud Storage
   • CCloud Armor
   • DCloud SQL
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A large enterprise is moving its IT operations to Google Cloud and wants to improve its ability to detect and respond to security threats. The security team wants a centralized solution that can collect and analyze security data from various sources, including network logs, application logs, and user activity. Which approach should they take?

   • AUse Cloud Armor to analyze all security logs
   • BDisable Cloud Audit Logs to reduce the amount of data to analyze
   • CImplement a Security Operations (SecOps) model using Google Cloud's security analytics tools
   • DRely on IAM to automatically detect and respond to all security threats
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A retail company wants to improve the security of its employee accounts in Google Cloud. The security team is concerned about phishing attacks that could compromise passwords. They want to add an extra layer of security beyond just a password. Which measure should they implement?

   • ARely on encryption at rest to protect passwords
   • BEnable two-step verification (2SV) for all users
   • CUse IAM to grant users the Owner role on all projects
   • DDisable Cloud Audit Logging to reduce the attack surface
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the primary business value of Google's defense-in-depth approach to infrastructure security?

   • AIt guarantees that no security breach can ever occur.
   • BIt eliminates the need for external security audits.
   • CIt ensures that all data is automatically encrypted in transit.
   • DIt reduces the risk of a single point of failure compromising the entire infrastructure.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A large organization is implementing a new security policy. They want to ensure that: (1) users are strongly authenticated, (2) users only have access to the resources they need, and (3) all access attempts are recorded for compliance. The security team is considering using two-step verification (2SV), IAM, and Cloud Audit Logs. Which statement correctly describes how these services work together?

   • A2SV authenticates users, IAM authorizes access, and Cloud Audit Logs record access attempts
   • BCloud Audit Logs authenticate users, IAM authorizes access, and 2SV records access attempts
   • CIAM authenticates users, 2SV authorizes access, and Cloud Audit Logs record access attempts
   • D2SV authenticates users, Cloud Audit Logs authorize access, and IAM records access attempts
   Reveal Solution Discussion Select an answer first