A company exposes a set of internal APIs to partner organizations. The security team wants to restrict which partners can access which APIs, and also limit the number of requests each partner can make per minute to prevent abuse. What should the security engineer configure?

Configure Identity-Aware Proxy (IAP) to require partner Google accounts and use Cloud Armor to rate limit requests.

Deploy Secure Web Proxy and configure URL filtering to block unauthorized API paths.

Use Cloud NGFW rules to allow traffic only from partner IP ranges and set up logging.

Create an API key for each partner, assign quotas and rate limits per key, and use IAM conditions to restrict access to specific APIs.

What is the primary role of health checks in a load balancer configuration?

To encrypt traffic between the load balancer and backend instances

To determine which backend instances are healthy and can receive traffic

To authenticate users before they access the application

To filter malicious requests before they reach the backend

What is the main benefit of enabling Layer 7 inspection on Cloud NGFW?

It can detect and block threats embedded in HTTP/HTTPS traffic

It filters traffic based on source IP addresses only

It automatically patches vulnerabilities in web applications

It encrypts all traffic between VMs

Which Google Cloud resource must be configured to use Identity-Aware Proxy (IAP) for a web application?

A load balancer or App Engine service

What is the purpose of an SSL policy on a Google Cloud load balancer?

To define which SSL/TLS versions and ciphers are allowed for client connections

To authenticate users before they access the application

To manage SSL certificates for backend instances

To filter traffic based on source IP addresses

Google CloudProfessional Cloud Security Engineer

Domain 2Objective 1

2.1 Designing and Configuring Perimeter Security PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 1)

Part of the Securing communications and establishing boundary protection domain, which accounts for 22% of the PROFESSIONAL-CLOUD-SECURITY-ENGINEER exam.

34questions here

7free pages

10concepts

22%of the exam

Questions 1–5

1application · medium
A company exposes a set of internal APIs to partner organizations. The security team wants to restrict which partners can access which APIs, and also limit the number of requests each partner can make per minute to prevent abuse. What should the security engineer configure?
Select an answer first
2foundation · easy
What is the primary role of health checks in a load balancer configuration?
Select an answer first
3foundation · easy
What is the main benefit of enabling Layer 7 inspection on Cloud NGFW?
Select an answer first
4foundation · easy
Which Google Cloud resource must be configured to use Identity-Aware Proxy (IAP) for a web application?
Select an answer first
5foundation · easy
What is the purpose of an SSL policy on a Google Cloud load balancer?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.