Google’s Trusted Infrastructure CLOUD-DIGITAL-LEADER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the primary purpose of encrypting data in transit?

   • ATo protect data as it moves between systems over a network.
   • BTo protect data from unauthorized access by cloud administrators.
   • CTo protect data while it is being processed by the CPU.
   • DTo protect data while it is stored on disk.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   How does Google's custom data center design contribute to security?

   • AIt ensures that all data is automatically encrypted in use.
   • BIt reduces the need for physical security measures.
   • CIt allows for the inclusion of custom security chips that verify the integrity of the server at boot.
   • DIt uses the same hardware as all other cloud providers, ensuring compatibility.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A financial services company is migrating its core banking application to Google Cloud. The application processes highly sensitive customer data. The security team has identified the following requirements: (1) protect against DDoS attacks, (2) ensure data is encrypted while being processed, and (3) maintain a layered security approach. Which combination of Google Cloud services should they implement?

   • ACloud VPN, IAM, and encryption at rest
   • BCloud CDN, Cloud Audit Logs, and two-step verification
   • CCloud Armor, Confidential Computing, and defense-in-depth architecture
   • DCloud Armor, Cloud CDN, and encryption in transit
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which statement best describes Google's defense-in-depth strategy for its infrastructure?

   • AIt relies on a single, strong firewall to protect all services.
   • BIt uses multiple security controls at different layers to protect data and systems.
   • CIt depends on customers to implement all security measures.
   • DIt focuses only on encrypting data at rest.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A government agency is evaluating Google Cloud for hosting classified workloads. They have strict requirements for hardware-level security and want to ensure that the servers are tamper-proof. Which aspect of Google's infrastructure should they consider?

   • AGoogle's use of Cloud Armor to protect the hardware
   • BGoogle's use of third-party servers with standard security features
   • CGoogle's reliance on encryption at rest to protect hardware
   • DGoogle's custom-designed servers with Titan security chips
   Reveal Solution Discussion Select an answer first