Google’s Trusted Infrastructure CLOUD-DIGITAL-LEADER Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A multinational corporation wants to reduce the time it takes to detect and respond to security incidents. They currently have separate security tools for different regions, which makes it difficult to correlate threats. They want a unified view of security across all their Google Cloud resources. Which approach should they take?

   • AAdopt a cloud-native SecOps model using Google Security Operations
   • BUse IAM to grant all users access to all security logs
   • CDeploy Cloud Armor in each region to analyze logs
   • DDisable Cloud Audit Logs to reduce noise
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A technology company is considering moving its sensitive workloads to Google Cloud. The CISO is impressed by the security features but wants to understand how Google protects the physical infrastructure. Which statement accurately describes Google's approach to data center security?

   • AGoogle does not need physical security because all data is encrypted
   • BGoogle allows customers to physically inspect the data centers
   • CGoogle relies on third-party data centers and standard security measures
   • DGoogle uses custom-designed servers and security chips to protect the hardware layer
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is a business benefit of implementing a cloud SecOps strategy?

   • AIt guarantees that no security incidents will occur.
   • BIt eliminates the need for security audits.
   • CIt reduces the time to detect and respond to security threats.
   • DIt automatically patches all software vulnerabilities.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   In the context of access control, what does authentication verify?

   • AWho a user claims to be.
   • BWhat actions a user has performed.
   • CWhat a user is allowed to do.
   • DWhere a user is located.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company is implementing a zero-trust security model. They want to ensure that every access request is authenticated, authorized, and audited. They also want to enforce least privilege. Which combination of Google Cloud services should they use?

   • ACloud Armor for authentication, IAM for auditing, and Cloud Audit Logs for authorization
   • BTwo-step verification for authorization, Cloud Audit Logs for authentication, and IAM for auditing
   • CIAM for authorization, Cloud Audit Logs for auditing, and two-step verification for authentication
   • DIAM for authentication, Cloud Audit Logs for authorization, and two-step verification for auditing
   Reveal Solution Discussion Select an answer first