What is the primary purpose of cloud security posture management (CSPM)?

To detect and remediate misconfigurations across cloud resources

To manage user identities and access permissions

To encrypt data at rest and in transit

To monitor network traffic for intrusions

What is a key benefit of automating VM patch management?

It guarantees that all VMs are patched immediately without any downtime

It eliminates the need for vulnerability scanning

It removes the need for patch testing

It reduces the window of exposure to known vulnerabilities

What language is used to write custom modules for Security Health Analytics?

Common Expression Language (CEL)

What is the primary purpose of drift detection in cloud security?

To monitor network traffic for anomalies

To detect unauthorized changes to cloud resources that deviate from the desired configuration

To manage user access permissions

An organization has a fleet of Compute Engine VMs running a legacy application. They need to automate the application of security patches to these VMs, and they want to verify that the patches were applied successfully. What should they implement?

Use a startup script that runs apt-get update and upgrade on every VM boot, and then use Cloud Monitoring to check for patch status.

Use Cloud Scheduler to run a gcloud command that patches all VMs, and then use Cloud Logging to check for errors.

Use a configuration management tool like Ansible to patch VMs, and then use Cloud Audit Logs to verify.

Use OS Patch Management to create a patch deployment that targets the VMs, and then use Cloud Security Command Center to check for remaining vulnerabilities.

Google CloudProfessional Cloud Security Engineer

Domain 4Objective 1

4.1 Automating Infrastructure and Application Security PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 2)

Part of the Managing operations domain, which accounts for 19% of the PROFESSIONAL-CLOUD-SECURITY-ENGINEER exam.

25questions here

5free pages

10concepts

19%of the exam

Questions 6–10

6foundation · easy
What is the primary purpose of cloud security posture management (CSPM)?
Select an answer first
7foundation · easy
What is a key benefit of automating VM patch management?
Select an answer first
8foundation · easy
What language is used to write custom modules for Security Health Analytics?
Select an answer first
9foundation · easy
What is the primary purpose of drift detection in cloud security?
Select an answer first
10application · medium
An organization has a fleet of Compute Engine VMs running a legacy application. They need to automate the application of security patches to these VMs, and they want to verify that the patches were applied successfully. What should they implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.