1.2 Designing Secure Applications PROFESSIONAL-CLOUD-DEVELOPER Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company is building a consumer-facing mobile app that needs user authentication. They want to support sign-in with Google, Facebook, and email/password, and they also want to enforce multi-factor authentication (MFA) for all users. What should they use?

   • AFirebase Authentication with Google and Facebook sign-in, and a custom MFA implementation.
   • BIdentity Platform with multiple identity providers and MFA enabled.
   • CIdentity-Aware Proxy (IAP) with OAuth 2.0 and a custom identity provider.
   • DCloud IAM with a custom OAuth 2.0 server and a separate MFA service.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   A bucket has a retention policy of 90 days. An object was uploaded 30 days ago. What happens if a delete request is made for that object?

   • AThe object is deleted immediately
   • BThe object is moved to the Archive storage class
   • CThe object is deleted but a backup is kept
   • DThe delete request fails until the object is at least 90 days old
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company is building a public API that will be consumed by third-party applications. They want to use OAuth 2.0 to allow these applications to access user data on behalf of the user. They also need to ensure that the API can verify the identity of the user and the application. What is the most appropriate OAuth 2.0 flow to use?

   • AImplicit flow.
   • BAuthorization Code flow with PKCE.
   • CClient Credentials flow.
   • DResource Owner Password Credentials flow.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which database service has an Auth Proxy similar to Cloud SQL Auth Proxy?

   • ACloud Spanner
   • BAlloyDB
   • CBigQuery
   • DFirestore
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the purpose of the Cloud SQL Auth Proxy?

   • ATo scale database instances
   • BTo provide secure access to Cloud SQL instances without public IPs
   • CTo manage database backups
   • DTo monitor database performance
   Reveal Solution Discussion Select an answer first