A company is implementing a new security policy. They want to ensure that users are who they claim to be and that they have the appropriate permissions. They also want to protect against phishing attacks that could compromise user credentials. Which combination of measures should they implement?

Multi-factor authentication (MFA) and role-based access control (RBAC)

Firewalls and intrusion detection systems (IDS)

Single sign-on (SSO) and strong password policies

Encryption and data loss prevention (DLP)

A company is designing a security architecture for its cloud environment. They need to balance the need for high availability with the need for strict confidentiality of data. Which approach best achieves this balance?

Encrypt data but do not implement redundancy

Use a single region with no redundancy to reduce the attack surface

Deploy redundant resources across multiple regions and encrypt all data

Implement redundancy but do not encrypt data

A company is comparing the security responsibilities between its on-premises data center and Google Cloud. They want to understand which security tasks will no longer be their responsibility after moving to the cloud. Which task is now the responsibility of the cloud provider?

Securing the physical data center facilities

Patching the operating system of virtual machines

Managing user access and identity policies

Compared to a traditional on-premises data center, a key difference in a cloud environment is that the cloud provider typically handles which of the following?

Physical security of the data center

Google CloudCloud Digital Leader

Domain 5Objective 1

Trust and Security in the Cloud CLOUD-DIGITAL-LEADER Practice Questions (Page 4)

Part of the Trust and Security with Google Cloud domain, which accounts for ~17% of the CLOUD-DIGITAL-LEADER exam.

27questions here

6free pages

5concepts

~17%of the exam

Questions 16–20

16expert · hard
A company is implementing a new security policy. They want to ensure that users are who they claim to be and that they have the appropriate permissions. They also want to protect against phishing attacks that could compromise user credentials. Which combination of measures should they implement?
Select an answer first
17expert · hard
A company is designing a security architecture for its cloud environment. They need to balance the need for high availability with the need for strict confidentiality of data. Which approach best achieves this balance?
Select an answer first
18application · medium
A company is comparing the security responsibilities between its on-premises data center and Google Cloud. They want to understand which security tasks will no longer be their responsibility after moving to the cloud. Which task is now the responsibility of the cloud provider?
Select an answer first
19foundation · easy
Which security pillar ensures that data is not altered or tampered with during storage or transmission?
Select an answer first
20foundation · easy
Compared to a traditional on-premises data center, a key difference in a cloud environment is that the cloud provider typically handles which of the following?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLOUD-DIGITAL-LEADER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “CLOUD-DIGITAL-LEADER” is a trademark of its owner, used for identification only.