What is the primary purpose of Identity Platform?

To provide authentication and user management for applications

To scan applications for vulnerabilities

What is the purpose of locking a retention policy on a Cloud Storage bucket?

To automatically transition objects to colder storage classes

To grant public access to the bucket

To allow objects to be deleted immediately after upload

To permanently prevent the retention policy from being reduced or removed

Which of the following capabilities is provided by Security Command Center?

Asset discovery and vulnerability management

A company builds and deploys container images to Google Artifact Registry. The security team wants to automatically scan images for vulnerabilities and block the deployment of images with critical vulnerabilities. What should they do?

Configure a Cloud Build trigger to run a custom vulnerability scan and fail the build if critical vulnerabilities are found.

Use Security Command Center to scan images and block deployments via IAM roles.

Enable Artifact Analysis on the registry and configure Binary Authorization to require an attestation that the image has no critical vulnerabilities.

Enable Artifact Analysis and manually review the findings before each deployment.

Google CloudProfessional Cloud Developer

Domain 1Objective 2

1.2 Designing Secure Applications PROFESSIONAL-CLOUD-DEVELOPER Practice Questions (Page 3)

Part of the Designing highly scalable, secure, and reliable cloud-native applications domain, which accounts for ~32% of the PROFESSIONAL-CLOUD-DEVELOPER exam.

52questions here

11free pages

19concepts

~32%of the exam

19 Concepts in This Objective

Cloud Storage Object Lifecycle Management
Cloud Storage Retention Policies and Locks
Identity-Aware Proxy (IAP)
Web Security Scanner
Artifact Analysis Vulnerability Scanning
Security Command Center
Secret Manager
Cloud Key Management Service (KMS)
Workload Identity Federation
Application Default Credentials (ADC)
JSON Web Tokens (JWT) and OAuth 2.0
Cloud SQL Auth Proxy and AlloyDB Auth Proxy
Identity Platform
IAM Roles for Service Accounts
Cloud Service Mesh
Kubernetes Network Policies
Direct VPC Egress and Private Service Connectivity
Least Privileged Access
Binary Authorization

Questions 11–15

11foundation · easy
What is the primary purpose of Identity Platform?
Select an answer first
12foundation · easy
What is the purpose of locking a retention policy on a Cloud Storage bucket?
Select an answer first
13foundation · easy
Which of the following is a valid identity provider for Workload Identity Federation?
Select an answer first
14foundation · easy
Which of the following capabilities is provided by Security Command Center?
Select an answer first
15application · medium
A company builds and deploys container images to Google Artifact Registry. The security team wants to automatically scan images for vulnerabilities and block the deployment of images with critical vulnerabilities. What should they do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-DEVELOPER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-DEVELOPER” is a trademark of its owner, used for identification only.