A company runs a Cloud SQL for PostgreSQL instance with only a private IP address. Developers need to connect from their on-premises workstations. The company has a Cloud VPN tunnel to the VPC where the instance resides. What is the most secure and supported way to enable developer connections?

Create a new VPC peering connection from the on-premises network to the instance's VPC.

Use the Cloud SQL Auth Proxy on each developer workstation.

Have developers connect directly to the private IP using their database credentials.

Assign a public IP to the instance and configure authorized networks.

A company has a Cloud SQL for SQL Server instance with a public IP. They want to restrict access to only the IP address of their office. What should you configure?

Use the Cloud SQL Auth Proxy with IAM authentication.

Create a firewall rule in the VPC to allow traffic from the office IP.

Enable SSL/TLS and require it for all connections.

Set the authorized networks to the office IP address.

A security auditor requires a record of all attempts to modify IAM policies on a Cloud SQL instance, including who made the change and when. What should you enable or use?

Enable database flag for general logging.

Use Cloud Monitoring alerts for IAM changes.

Enable admin activity audit logs for the project.

Enable data access audit logs for the instance.

A Cloud SQL for MySQL instance has a database user 'app_user' that is used by a legacy application. The application is being decommissioned, and the security team wants to ensure the user can no longer access the database. What should you do?

Revoke all privileges from 'app_user'.

Which authentication method is typically used for a human user who needs to connect to a Cloud SQL database using a SQL client tool?

Database-native authentication with a password

Google CloudProfessional Cloud Database Engineer

Domain 2Objective 1

2.1 Determine Database Connectivity and Access Management Considerations PROFESSIONAL-CLOUD-DATABASE-ENGINEER Practice Questions (Page 3)

Part of the Manage a solution that can span multiple database technologies domain, which accounts for ~25% of the PROFESSIONAL-CLOUD-DATABASE-ENGINEER exam.

24questions here

5free pages

6concepts

~25%of the exam

Questions 11–15

11application · medium
A company runs a Cloud SQL for PostgreSQL instance with only a private IP address. Developers need to connect from their on-premises workstations. The company has a Cloud VPN tunnel to the VPC where the instance resides. What is the most secure and supported way to enable developer connections?
Select an answer first
12application · medium
A company has a Cloud SQL for SQL Server instance with a public IP. They want to restrict access to only the IP address of their office. What should you configure?
Select an answer first
13application · medium
A security auditor requires a record of all attempts to modify IAM policies on a Cloud SQL instance, including who made the change and when. What should you enable or use?
Select an answer first
14application · medium
A Cloud SQL for MySQL instance has a database user 'app_user' that is used by a legacy application. The application is being decommissioned, and the security team wants to ensure the user can no longer access the database. What should you do?
Select an answer first
15foundation · easy
Which authentication method is typically used for a human user who needs to connect to a Cloud SQL database using a SQL client tool?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-DATABASE-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-DATABASE-ENGINEER” is a trademark of its owner, used for identification only.