Which of the following features is supported by Identity Platform?

Multi-factor authentication (MFA)

A company has a web application deployed on Compute Engine behind a load balancer. The security team wants to proactively identify common web vulnerabilities like XSS and SQL injection before they are exploited. What should they use?

Run Web Security Scanner against the application's public URL.

Enable Security Command Center and review the asset inventory for misconfigurations.

Configure Identity-Aware Proxy (IAP) to restrict access to the application.

Use Artifact Analysis to scan the application's container image for vulnerabilities.

A lifecycle rule in Cloud Storage can trigger an action based on which of the following conditions?

Last access time, metadata, and label

Object age, creation time, or storage class

Object size, checksum, and encryption key

Bucket location, project ID, and IAM role

What is the primary purpose of Secret Manager in Google Cloud?

To securely store and manage sensitive data like API keys and passwords

To encrypt data at rest in Cloud Storage

A company runs a batch processing job on an on-premises server that needs to read data from a Cloud Storage bucket. The security team wants to avoid creating and downloading a service account key file. What is the recommended approach?

Use Application Default Credentials (ADC) on the on-premises server to authenticate to Cloud Storage.

Grant the on-premises server's external IP address access to the Cloud Storage bucket via IAM conditions.

Configure Workload Identity Federation to allow the on-premises workload to impersonate a service account.

Create a service account key and store it in a secure location on the on-premises server.

Google CloudProfessional Cloud Developer

Domain 1Objective 2

1.2 Designing Secure Applications PROFESSIONAL-CLOUD-DEVELOPER Practice Questions (Page 2)

Part of the Designing highly scalable, secure, and reliable cloud-native applications domain, which accounts for ~32% of the PROFESSIONAL-CLOUD-DEVELOPER exam.

52questions here

11free pages

19concepts

~32%of the exam

19 Concepts in This Objective

Cloud Storage Object Lifecycle Management
Cloud Storage Retention Policies and Locks
Identity-Aware Proxy (IAP)
Web Security Scanner
Artifact Analysis Vulnerability Scanning
Security Command Center
Secret Manager
Cloud Key Management Service (KMS)
Workload Identity Federation
Application Default Credentials (ADC)
JSON Web Tokens (JWT) and OAuth 2.0
Cloud SQL Auth Proxy and AlloyDB Auth Proxy
Identity Platform
IAM Roles for Service Accounts
Cloud Service Mesh
Kubernetes Network Policies
Direct VPC Egress and Private Service Connectivity
Least Privileged Access
Binary Authorization

Questions 6–10

6foundation · easy
Which of the following features is supported by Identity Platform?
Select an answer first
7application · medium
A company has a web application deployed on Compute Engine behind a load balancer. The security team wants to proactively identify common web vulnerabilities like XSS and SQL injection before they are exploited. What should they use?
Select an answer first
8foundation · easy
A lifecycle rule in Cloud Storage can trigger an action based on which of the following conditions?
Select an answer first
9foundation · easy
What is the primary purpose of Secret Manager in Google Cloud?
Select an answer first
10application · medium
A company runs a batch processing job on an on-premises server that needs to read data from a Cloud Storage bucket. The security team wants to avoid creating and downloading a service account key file. What is the recommended approach?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-DEVELOPER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-DEVELOPER” is a trademark of its owner, used for identification only.