What is the primary function of Identity-Aware Proxy (IAP)?

To encrypt all network traffic between VMs

To control access to applications and VMs based on user identity and context

To provide a load balancer for web applications

To manage DNS records for custom domains

What is the primary goal of Chrome Enterprise Premium?

To manage Chrome browser updates

To provide zero-trust access to web applications and resources

To provide a web browser for employees

To provide a VPN for remote access

In a generative AI application, where does Model Armor typically inspect data to provide security?

On both the user prompts (inputs) and the model responses (outputs)

Only on the network traffic between the client and the API endpoint

Only on the model's training data before deployment

Only on the user's client device before the request is sent

What is a key benefit of using service account impersonation instead of downloading service account keys?

It avoids the risk of long-lived keys being compromised

It allows multiple users to share the same key

It eliminates the need for IAM roles

It provides permanent access to all resources

Which of the following correctly lists the Google Cloud resource hierarchy from top to bottom?

Organization → Folder → Project → Resources

Project → Folder → Organization → Resources

Folder → Organization → Project → Resources

Organization → Project → Folder → Resources

Google CloudProfessional Cloud Architect

Domain 3Objective 1

3.1 Designing for Security PROFESSIONAL-CLOUD-ARCHITECT Practice Questions (Page 3)

Part of the Designing for security and compliance domain, which accounts for ~17.5% of the PROFESSIONAL-CLOUD-ARCHITECT exam. Google Cloud does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–9 in this domain), expect 5–5 from this objective — we provide 55 practice questions to prepare you well beyond it. (estimate)

55questions here

11free pages

23concepts

~17.5%of the exam

23 Concepts in This Objective

IAM Roles and Permissions
IAM Policy Binding
Resource Hierarchy
IAM Best Practices
Data Encryption at Rest and in Transit
Cloud KMS Key Management
Key Hierarchy and Envelope Encryption
Secret Management
Separation of Duties
Audit Logging
VPC Service Controls
Context-Aware Access
Organization Policy
Hierarchical Firewall Policies
Identity-Aware Proxy (IAP)
Service Account Impersonation
Chrome Enterprise Premium
Workload Identity Federation
Software Supply Chain Security
Secure CI/CD Pipeline
Model Armor
Sensitive Data Protection
Secure Model Deployment

Questions 11–15

11foundation · easy
What is the primary function of Identity-Aware Proxy (IAP)?
Select an answer first
12foundation · easy
What is the primary goal of Chrome Enterprise Premium?
Select an answer first
13foundation · easy
In a generative AI application, where does Model Armor typically inspect data to provide security?
Select an answer first
14foundation · easy
What is a key benefit of using service account impersonation instead of downloading service account keys?
Select an answer first
15foundation · easy
Which of the following correctly lists the Google Cloud resource hierarchy from top to bottom?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-ARCHITECT” is a trademark of its owner, used for identification only.