To meet data sovereignty requirements, an organization needs to restrict where Cloud Storage buckets can be created. Which Google Cloud feature should be used?

Organizational policy with a location constraint

A company is required to maintain a complete audit trail of all actions taken by administrators and any access to sensitive data. They also need to be alerted if any audit log entries are deleted or modified. What should they do?

Enable Access Transparency and export logs to Cloud Storage.

Use Cloud Monitoring to watch for audit log entries and send alerts.

Enable Admin Activity and Data Access audit logs, and configure log sinks to export logs to Cloud Storage with a retention policy and set up alerts on log deletion.

Enable only Admin Activity audit logs and export them to BigQuery.

Google CloudProfessional Cloud Security Engineer

Domain 5Objective 1

5.1 Adhering to Regulatory and Industry Standards Requirements for the Cloud PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 3)

Part of the Supporting compliance requirements domain, which accounts for 11% of the PROFESSIONAL-CLOUD-SECURITY-ENGINEER exam.

28questions here

6free pages

10concepts

11%of the exam

Questions 11–15

11foundation · easy
A compliance framework requires that network traffic between on-premises systems and Google Cloud be encrypted in transit. Which Google Cloud service is designed to provide this encrypted connectivity?
Select an answer first
12foundation · easy
To meet data sovereignty requirements, an organization needs to restrict where Cloud Storage buckets can be created. Which Google Cloud feature should be used?
Select an answer first
13foundation · easy
A security team needs to enforce a rule that prevents the creation of Cloud Storage buckets in non-approved regions across all projects in an organization. Which Google Cloud feature should they use?
Select an answer first
14foundation · easy
Which Google Cloud feature allows customers to approve or deny Google personnel access to their data?
Select an answer first
15application · medium
A company is required to maintain a complete audit trail of all actions taken by administrators and any access to sensitive data. They also need to be alerted if any audit log entries are deleted or modified. What should they do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.

5.1 Adhering to Regulatory and Industry Standards Requirements for the Cloud PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 3)

Questions 11–15

A compliance framework requires that network traffic between on-premises systems and Google Cloud be encrypted in transit. Which Google Cloud service is designed to provide this encrypted connectivity?

To meet data sovereignty requirements, an organization needs to restrict where Cloud Storage buckets can be created. Which Google Cloud feature should be used?

A security team needs to enforce a rule that prevents the creation of Cloud Storage buckets in non-approved regions across all projects in an organization. Which Google Cloud feature should they use?

Which Google Cloud feature allows customers to approve or deny Google personnel access to their data?

A company is required to maintain a complete audit trail of all actions taken by administrators and any access to sensitive data. They also need to be alerted if any audit log entries are deleted or modified. What should they do?

Keep studying — Supporting compliance requirements