What is a security benefit of using Cloud NAT for outbound internet access?

It blocks inbound traffic from the internet

It provides a public IP address for each instance

It encrypts all outbound traffic

It hides internal IP addresses from the internet

What is a key feature of HA VPN compared to classic VPN?

It provides a dedicated physical connection

It can only be used within the same region

It offers a 99.99% availability SLA

A security team wants to ensure that Google Cloud APIs can only be accessed from approved networks within their organization. They have a VPC with a subnet that has Private Google Access enabled. They want to restrict access to Google APIs so that only traffic originating from this specific subnet is allowed. What should they configure?

Create a firewall rule that allows traffic to the restricted Google API IP range only from the approved subnet.

Use Cloud Armor to create a policy that blocks traffic to Google APIs from non-approved networks.

Configure the VPC firewall to deny all traffic to the public IP ranges of Google APIs.

Enable Private Service Connect and create a private endpoint for each Google API.

Google CloudProfessional Cloud Security Engineer

Domain 2Objective 3

2.3 Establishing Private Connectivity PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 3)

Part of the Securing communications and establishing boundary protection domain, which accounts for 22% of the PROFESSIONAL-CLOUD-SECURITY-ENGINEER exam.

25questions here

5free pages

9concepts

22%of the exam

Questions 11–15

11foundation · easy
What is a security benefit of using Cloud NAT for outbound internet access?
Select an answer first
12foundation · easy
What is a key feature of HA VPN compared to classic VPN?
Select an answer first
13foundation · easy
An organization wants to restrict access to Google APIs so that only requests from approved networks are allowed. Which Google Cloud feature should they use?
Select an answer first
14application · medium
A security team wants to ensure that Google Cloud APIs can only be accessed from approved networks within their organization. They have a VPC with a subnet that has Private Google Access enabled. They want to restrict access to Google APIs so that only traffic originating from this specific subnet is allowed. What should they configure?
Select an answer first
15foundation · easy
A company has two VPC networks in different projects that need to communicate privately without using the public internet. Which Google Cloud feature establishes this connectivity?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.

2.3 Establishing Private Connectivity PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 3)

Questions 11–15

What is a security benefit of using Cloud NAT for outbound internet access?

What is a key feature of HA VPN compared to classic VPN?

An organization wants to restrict access to Google APIs so that only requests from approved networks are allowed. Which Google Cloud feature should they use?

A company has two VPC networks in different projects that need to communicate privately without using the public internet. Which Google Cloud feature establishes this connectivity?

Keep studying — Securing communications and establishing boundary protection