Google’s Trusted Infrastructure CLOUD-DIGITAL-LEADER Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is the primary function of a web application firewall (WAF) like the one in Cloud Armor?

   • ATo block malicious web traffic based on rules.
   • BTo provide backup and disaster recovery.
   • CTo encrypt data at rest in databases.
   • DTo manage user identities and permissions.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is a primary benefit of using two-step verification (2SV)?

   • AIt allows users to share their passwords securely.
   • BIt provides an additional layer of security beyond just a password.
   • CIt speeds up the login process for users.
   • DIt eliminates the need for passwords.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A startup is planning to migrate its application to Google Cloud. The CTO is concerned about the security of the infrastructure and wants to ensure that even if one security layer fails, other layers will still protect the application. Which security principle should the CTO rely on?

   • ALeast privilege
   • BSingle point of failure
   • CDefense-in-depth
   • DEncryption at rest only
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A research organization is processing highly sensitive genomic data on Google Cloud. They have strict compliance requirements that mandate data be encrypted at rest, in transit, and in use. The organization also wants to ensure that even Google cannot access the encryption keys. Which approach should they take?

   • AUse Confidential Computing for all states of data
   • BUse customer-supplied encryption keys (CSEK) for at rest, and rely on Google's default encryption for in transit and in use
   • CUse Google-managed encryption keys for at rest and in transit, and Confidential Computing for data in use
   • DUse customer-managed encryption keys (CMEK) for at rest, TLS for in transit, and Confidential Computing for data in use
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A company wants to enforce a policy that requires employees to use a security key in addition to their password when accessing Google Cloud resources. This policy is intended to reduce the risk of account takeover. Which Google Cloud feature should they enable?

   • ATwo-step verification (2SV)
   • BCloud Armor
   • CCloud Audit Logs
   • DIdentity and Access Management (IAM)
   Reveal Solution Discussion Select an answer first