Google’s Trusted Infrastructure CLOUD-DIGITAL-LEADER Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A company is implementing a new access control policy for its cloud resources. The security team wants to ensure that users are who they claim to be, that they only have access to the resources they need, and that their actions are recorded. Which combination of Google Cloud features should they use to achieve all three goals?

   • ACloud Audit Logs for authentication, two-step verification for authorization, and IAM for auditing
   • BIAM for authentication, two-step verification for authorization, and Cloud Audit Logs for auditing
   • CTwo-step verification for authentication, IAM for authorization, and Cloud Audit Logs for auditing
   • DIAM for authentication, Cloud Audit Logs for authorization, and two-step verification for auditing
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is a key benefit of Google designing and building its own data centers and custom hardware?

   • AIt allows Google to offer lower prices by using generic, off-the-shelf equipment.
   • BIt ensures that all customer data is stored on dedicated physical servers.
   • CIt eliminates the need for software-based security controls.
   • DIt enables tighter integration of security features into the hardware and software stack.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which state of data is protected by encryption at rest?

   • AData stored on a disk or in a database.
   • BData being actively processed by an application.
   • CData being transmitted over the internet.
   • DData that is being backed up to tape.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A healthcare organization is moving its patient records to Google Cloud. The security team wants to ensure that data is protected not only when stored and transmitted but also during processing. Which Google Cloud capability should they rely on to protect data while it is being processed in memory?

   • AIdentity and Access Management (IAM) to restrict access to the data
   • BEncryption of data in transit using TLS
   • CEncryption of data at rest using customer-managed encryption keys (CMEK)
   • DConfidential Computing, which keeps data encrypted while in use
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A media company stores large video files in Google Cloud Storage and streams them to users over the internet. The security team wants to ensure that the video files are protected both while stored and while being transmitted to users. Which combination of encryption methods should they use?

   • AEncryption at rest only, since the files are stored in the cloud
   • BEncryption at rest for stored files and encryption in transit for streaming
   • CEncryption in transit only, since the files are only accessed over the internet
   • DConfidential Computing for both storage and transmission
   Reveal Solution Discussion Select an answer first