2.2 Configuring Boundary Segmentation PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In a Shared VPC setup, which project is responsible for managing the shared VPC network and its firewall rules?

   • AThe organization admin project
   • BThe billing project
   • CThe host project
   • DEach service project
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company wants to protect their Cloud Storage buckets from data exfiltration by users who have access to the buckets. They want to ensure that only traffic from within their VPC network can access the buckets. What should they do?

   • AUse IAM conditions to restrict access to the Cloud Storage buckets to only users in the VPC network.
   • BCreate a VPC Service Controls perimeter and add the Cloud Storage API to the perimeter. Then, set up a private connection from the VPC network to the Cloud Storage API.
   • CCreate a firewall rule that only allows traffic from the VPC network to the Cloud Storage API.
   • DPlace the Cloud Storage buckets in a separate project and use VPC peering to connect to it.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary purpose of Shared VPC in Google Cloud?

   • ATo automatically replicate data between projects for disaster recovery.
   • BTo create a VPN connection between two VPC networks.
   • CTo allow multiple projects to use a common VPC network, enabling centralized network management and security policy enforcement.
   • DTo provide a single public IP address for all resources in a project.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the purpose of data encapsulation in the context of N-tier applications?

   • ATo protect data in transit between application tiers using encryption or VPNs.
   • BTo convert data into a format that can be stored in a database.
   • CTo compress data to reduce storage costs.
   • DTo isolate data within a single tier.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the primary benefit of placing each tier of an N-tier application in a separate subnet?

   • AIt automatically encrypts traffic between tiers.
   • BIt eliminates the need for firewall rules.
   • CIt improves application performance by reducing network latency.
   • DIt allows you to apply different firewall rules to each tier, limiting traffic between tiers to only what is necessary.
   Reveal Solution Discussion Select an answer first