A company must ensure that all data processed by a Cloud SQL instance remains within a specific country. Which Google Cloud configuration directly supports this requirement?

Deploying the instance in a specific region

Configuring Cloud Load Balancing

A company must enforce that all VMs are created with a specific set of labels for compliance reporting. They also need to ensure that any VM created without the required labels is automatically denied. They have set an organization policy with a constraint to require labels. What else must they do to ensure the policy is effective?

Create a VPC Service Controls perimeter around Compute Engine.

Use Cloud KMS to encrypt VM disks and ensure labels are applied.

Enable Data Access audit logs to capture VM creation attempts.

Ensure the organization policy is applied at the folder or project level where VMs are created, and test with a VM creation attempt.

A compliance auditor asks which Google Cloud resources are covered by a specific regulatory framework. How should the security team determine the scope?

Check the billing account settings

Review the compliance reports and documentation for the specific framework

A compliance framework requires encryption of data at rest for a Cloud SQL database. Which Google Cloud feature should be used to meet this requirement?

Customer-managed encryption keys (CMEK)

Google CloudProfessional Cloud Security Engineer

Domain 5Objective 1

5.1 Adhering to Regulatory and Industry Standards Requirements for the Cloud PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 4)

Part of the Supporting compliance requirements domain, which accounts for 11% of the PROFESSIONAL-CLOUD-SECURITY-ENGINEER exam.

28questions here

6free pages

10concepts

11%of the exam

Questions 16–20

16foundation · easy
A company must ensure that all data processed by a Cloud SQL instance remains within a specific country. Which Google Cloud configuration directly supports this requirement?
Select an answer first
17foundation · easy
When you create an Assured Workloads folder, which compliance control is automatically enforced at the organization level?
Select an answer first
18expert · hard
A company must enforce that all VMs are created with a specific set of labels for compliance reporting. They also need to ensure that any VM created without the required labels is automatically denied. They have set an organization policy with a constraint to require labels. What else must they do to ensure the policy is effective?
Select an answer first
19foundation · easy
A compliance auditor asks which Google Cloud resources are covered by a specific regulatory framework. How should the security team determine the scope?
Select an answer first
20foundation · easy
A compliance framework requires encryption of data at rest for a Cloud SQL database. Which Google Cloud feature should be used to meet this requirement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.

5.1 Adhering to Regulatory and Industry Standards Requirements for the Cloud PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 4)

Questions 16–20

A company must ensure that all data processed by a Cloud SQL instance remains within a specific country. Which Google Cloud configuration directly supports this requirement?

When you create an Assured Workloads folder, which compliance control is automatically enforced at the organization level?

A compliance auditor asks which Google Cloud resources are covered by a specific regulatory framework. How should the security team determine the scope?

A compliance framework requires encryption of data at rest for a Cloud SQL database. Which Google Cloud feature should be used to meet this requirement?

Keep studying — Supporting compliance requirements