A company is required to retain audit logs for six years and must be able to prove that logs have not been tampered with. They also need to monitor for any attempts to delete or modify logs. They have enabled Admin Activity and Data Access audit logs. What additional steps should they take?

Export logs to BigQuery and use table expiration to retain for six years.

Use Cloud Logging's default retention and enable Access Transparency.

Export logs to Cloud Storage with a retention policy and object lock, and set up alerts on log deletion or modification.

Store logs in a separate project and use IAM to restrict access.

A company must protect sensitive data stored in Cloud Storage from unauthorized access by other Google Cloud services and users. They also need to ensure that data is encrypted at rest and in transit. Which combination of services and features should they use?

Use a private bucket and enable Access Transparency.

Use a firewall rule to restrict access to the bucket and enable audit logging.

Use VPC Service Controls, enable encryption by default, and use IAM conditions to restrict access.

Use Cloud KMS to manage encryption keys and enable Data Loss Prevention (DLP) for the bucket.

In the Google Cloud shared responsibility model, which security responsibility is always the customer's, regardless of the service type?

Physical security of data centers

Patching of the underlying host OS

Access management for customer data

Google CloudProfessional Cloud Security Engineer

Domain 5Objective 1

5.1 Adhering to Regulatory and Industry Standards Requirements for the Cloud PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 1)

Part of the Supporting compliance requirements domain, which accounts for 11% of the PROFESSIONAL-CLOUD-SECURITY-ENGINEER exam.

28questions here

6free pages

10concepts

11%of the exam

Questions 1–5

1expert · hard
A company is required to retain audit logs for six years and must be able to prove that logs have not been tampered with. They also need to monitor for any attempts to delete or modify logs. They have enabled Admin Activity and Data Access audit logs. What additional steps should they take?
Select an answer first
2foundation · easy
A financial institution must deploy workloads in Google Cloud with guaranteed data residency and restrictions on Google personnel access. Which Google Cloud solution is designed to enforce these compliance controls?
Select an answer first
3application · medium
A company must protect sensitive data stored in Cloud Storage from unauthorized access by other Google Cloud services and users. They also need to ensure that data is encrypted at rest and in transit. Which combination of services and features should they use?
Select an answer first
4foundation · easy
In the Google Cloud shared responsibility model, which security responsibility is always the customer's, regardless of the service type?
Select an answer first
5foundation · easy
A regulatory framework requires that all administrative actions on Google Cloud resources be logged. Which type of Cloud Audit Logs should be enabled to capture these actions?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.

5.1 Adhering to Regulatory and Industry Standards Requirements for the Cloud PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 1)

Questions 1–5

A company is required to retain audit logs for six years and must be able to prove that logs have not been tampered with. They also need to monitor for any attempts to delete or modify logs. They have enabled Admin Activity and Data Access audit logs. What additional steps should they take?

A financial institution must deploy workloads in Google Cloud with guaranteed data residency and restrictions on Google personnel access. Which Google Cloud solution is designed to enforce these compliance controls?

A company must protect sensitive data stored in Cloud Storage from unauthorized access by other Google Cloud services and users. They also need to ensure that data is encrypted at rest and in transit. Which combination of services and features should they use?

In the Google Cloud shared responsibility model, which security responsibility is always the customer's, regardless of the service type?

A regulatory framework requires that all administrative actions on Google Cloud resources be logged. Which type of Cloud Audit Logs should be enabled to capture these actions?

Keep studying — Supporting compliance requirements