2.2 Configuring Boundary Segmentation PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is a key capability of VPC Service Controls?

   • AAutomatically encrypting all data stored in Google Cloud services.
   • BRestricting access to Google Cloud services from specific VPC networks and IP addresses.
   • CCreating a VPN tunnel between your on-premises network and Google Cloud.
   • DProviding a firewall for all incoming traffic to your VPC.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the default action for a VPC firewall rule if no rule matches the traffic?

   • ALog the traffic and allow it
   • BRedirect the traffic to a proxy
   • CAllow the traffic
   • DDeny the traffic
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company has two VPC networks in different projects. They want to allow communication between resources in these networks while maintaining security boundaries. They have set up VPC peering between the networks. What is a requirement for this to work?

   • ABoth networks must be in the same region.
   • BBoth networks must have the same firewall rules.
   • CBoth networks must be in the same project.
   • DThe IP ranges of the two networks must not overlap.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A large organization has multiple projects for different teams. They want to centrally manage network resources and enforce consistent security policies across all projects. They also want to allow each team to create their own resources, such as Compute Engine instances, in shared subnets. What should they do?

   • AUse VPC Service Controls to create a perimeter around all the projects.
   • BCreate a new VPC network in each project and use VPC peering to connect them all.
   • CSet up Shared VPC by designating a host project and attaching service projects to it. Grant the teams the necessary IAM roles to use the shared subnets.
   • DUse a single VPC network in one project and grant all teams access to that project.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company is deploying a multi-tier application where the application tier needs to communicate with a database tier over a private network. They are concerned about data being intercepted during transmission. They want to ensure that data in transit between the tiers is encrypted. What should they do?

   • AUse a VPN tunnel between the application and database tiers.
   • BUse firewall rules to restrict traffic to the database tier, which will prevent interception.
   • CUse IAM roles to restrict access to the database, which will ensure data is encrypted.
   • DUse VPC peering to connect the tiers, which automatically encrypts traffic.
   Reveal Solution Discussion Select an answer first