3.1 Designing for Security PROFESSIONAL-CLOUD-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company has a complex network with multiple VPCs across different projects. They want to enforce a consistent set of firewall rules for all VMs in their organization, such as blocking all inbound traffic from the internet except on port 443. What is the most efficient way to manage these rules?

   • ACreate hierarchical firewall policies at the organization node and apply them to all projects.
   • BCreate firewall rules in each VPC network individually.
   • CUse VPC Service Controls to block all inbound traffic except on port 443.
   • DUse Cloud Armor to block all inbound traffic except on port 443.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In Cloud KMS, what is the correct hierarchy of resources?

   • AKey ring → Key version → Crypto key
   • BCrypto key → Key ring → Key version
   • CKey version → Crypto key → Key ring
   • DKey ring → Crypto key → Key version
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which Google Cloud service is the foundation of Chrome Enterprise Premium?

   • ACloud Armor
   • BCloud VPN
   • CBeyondCorp Enterprise
   • DCloud Load Balancing
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which authentication mechanism does IAP use to verify user identity?

   • ATLS certificates
   • BAPI keys
   • COAuth 2.0
   • DSSH keys
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the role of Artifact Registry in a secure CI/CD pipeline?

   • ATo execute CI/CD pipeline steps
   • BTo store and manage container images and other artifacts with access control and vulnerability scanning
   • CTo authenticate users to the pipeline
   • DTo encrypt the pipeline's source code
   Reveal Solution Discussion Select an answer first