What is a JSON Web Token (JWT) commonly used for?

To securely transmit information between parties

To store files in Cloud Storage

A financial services company stores sensitive customer data in Cloud Storage. They have a regulatory requirement to encrypt data with customer-managed keys and to rotate the keys annually. They also want to ensure that the encryption keys are not accessible to Google Cloud support personnel. What should they do?

Store the encryption key in Secret Manager and reference it in the Cloud Storage bucket's encryption configuration.

Create a Cloud KMS key ring and key, set the rotation period to one year, and use the key to encrypt the Cloud Storage bucket.

Generate a local AES-256 key, encrypt the data before uploading, and store the key in a separate Cloud Storage bucket.

Use Google-managed encryption keys and enable key rotation in the Cloud Storage bucket settings.

How does Binary Authorization determine if an image is trusted?

By verifying attestations from trusted authorities

By checking the image's storage class

Google CloudProfessional Cloud Developer

Domain 1Objective 2

1.2 Designing Secure Applications PROFESSIONAL-CLOUD-DEVELOPER Practice Questions (Page 8)

Part of the Designing highly scalable, secure, and reliable cloud-native applications domain, which accounts for ~32% of the PROFESSIONAL-CLOUD-DEVELOPER exam.

52questions here

11free pages

19concepts

~32%of the exam

19 Concepts in This Objective

Cloud Storage Object Lifecycle Management
Cloud Storage Retention Policies and Locks
Identity-Aware Proxy (IAP)
Web Security Scanner
Artifact Analysis Vulnerability Scanning
Security Command Center
Secret Manager
Cloud Key Management Service (KMS)
Workload Identity Federation
Application Default Credentials (ADC)
JSON Web Tokens (JWT) and OAuth 2.0
Cloud SQL Auth Proxy and AlloyDB Auth Proxy
Identity Platform
IAM Roles for Service Accounts
Cloud Service Mesh
Kubernetes Network Policies
Direct VPC Egress and Private Service Connectivity
Least Privileged Access
Binary Authorization

Questions 36–40

36foundation · easy
What is a JSON Web Token (JWT) commonly used for?
Select an answer first
37application · medium
A financial services company stores sensitive customer data in Cloud Storage. They have a regulatory requirement to encrypt data with customer-managed keys and to rotate the keys annually. They also want to ensure that the encryption keys are not accessible to Google Cloud support personnel. What should they do?
Select an answer first
38foundation · easy
How does Binary Authorization determine if an image is trusted?
Select an answer first
39foundation · easy
In which environment does ADC automatically use the metadata server for credentials?
Select an answer first
40foundation · easy
Which security feature is commonly implemented using Cloud Service Mesh?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-DEVELOPER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-DEVELOPER” is a trademark of its owner, used for identification only.

1.2 Designing Secure Applications PROFESSIONAL-CLOUD-DEVELOPER Practice Questions (Page 8)

Questions 36–40

What is a JSON Web Token (JWT) commonly used for?

How does Binary Authorization determine if an image is trusted?

In which environment does ADC automatically use the metadata server for credentials?

Which security feature is commonly implemented using Cloud Service Mesh?

Keep studying — Designing highly scalable, secure, and reliable cloud-native applications