What is the primary function of Secure Web Proxy in Google Cloud?

To provide a public IP address for VMs

To encrypt data at rest in Cloud Storage

To manage SSL certificates for load balancers

To filter and inspect outbound web traffic from VMs

Which component in Certificate Authority Service represents a single certificate authority that can issue certificates?

A certificate revocation list (CRL)

What is the primary purpose of Google Cloud Armor?

To provide identity-based access control to applications

To manage SSL certificates for load balancers

To encrypt data at rest in Cloud Storage

To protect applications from web attacks like OWASP Top 10

A company has a web application behind an external load balancer. The security team wants to block requests from specific geographic regions and also block requests that contain malicious signatures. They want to implement this at the edge without affecting backend performance. What should the security engineer configure?

Configure Cloud NGFW with layer 7 inspection to block geo and malicious traffic.

Modify the application code to check geo and signatures.

Create a Google Cloud Armor policy with geo-based rules and preconfigured WAF rules, and attach it to the backend service.

Use Secure Web Proxy to filter inbound requests based on geo and signatures.

Google CloudProfessional Cloud Security Engineer

Domain 2Objective 1

2.1 Designing and Configuring Perimeter Security PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 5)

Part of the Securing communications and establishing boundary protection domain, which accounts for 22% of the PROFESSIONAL-CLOUD-SECURITY-ENGINEER exam.

34questions here

7free pages

10concepts

22%of the exam

Questions 21–25

21foundation · easy
Which Google Cloud feature allows you to monitor API usage and detect unauthorized access?
Select an answer first
22foundation · easy
What is the primary function of Secure Web Proxy in Google Cloud?
Select an answer first
23foundation · easy
Which component in Certificate Authority Service represents a single certificate authority that can issue certificates?
Select an answer first
24foundation · easy
What is the primary purpose of Google Cloud Armor?
Select an answer first
25application · medium
A company has a web application behind an external load balancer. The security team wants to block requests from specific geographic regions and also block requests that contain malicious signatures. They want to implement this at the edge without affecting backend performance. What should the security engineer configure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.

2.1 Designing and Configuring Perimeter Security PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 5)

Questions 21–25

Which Google Cloud feature allows you to monitor API usage and detect unauthorized access?

What is the primary function of Secure Web Proxy in Google Cloud?

Which component in Certificate Authority Service represents a single certificate authority that can issue certificates?

What is the primary purpose of Google Cloud Armor?

Keep studying — Securing communications and establishing boundary protection