2.1 Designing and Configuring Perimeter Security PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is a characteristic of a private IP address in Google Cloud?

   • AIt is routable over the public internet
   • BIt is only accessible from within the same VPC network or via VPN/Interconnect
   • CIt is automatically assigned to all resources by default
   • DIt is always static and cannot be changed
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which protocol is most commonly inspected at Layer 7 by Cloud NGFW?

   • ATCP
   • BHTTP/HTTPS
   • CUDP
   • DICMP
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A company wants to enforce a policy that blocks employees from accessing known malicious websites and prevents data exfiltration to unauthorized domains. The company uses Cloud DNS for internal resolution and wants to inspect all outbound web traffic from its VMs. What should the security engineer deploy?

   • AConfigure Cloud DNS logging and analyze logs to detect malicious domains.
   • BEnable DNSSEC on Cloud DNS to prevent DNS spoofing and block malicious domains.
   • CDeploy Secure Web Proxy and configure it as the default gateway for outbound web traffic, with URL filtering policies.
   • DCreate Cloud NGFW rules to deny egress to all IP addresses except those in an allowlist.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is the primary function of Identity-Aware Proxy (IAP) in Google Cloud?

   • ATo encrypt all traffic between VMs
   • BTo filter network traffic based on IP addresses
   • CTo control access to applications based on user identity and context
   • DTo monitor API usage and enforce quotas
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is the primary purpose of setting quotas on APIs in Google Cloud?

   • ATo encrypt API requests and responses
   • BTo log all API requests
   • CTo limit the number of requests a client can make within a time period
   • DTo authenticate users before they access the API
   Reveal Solution Discussion Select an answer first