This document contains exam questions and answers for the Google Cloud Professional Cloud Security Engineer certification. It covers topics such as Google Cloud Directory Sync, IAM roles, encryption methods, and best practices for Kubernetes deployments. Additionally, it lists other certification topics for Azure, AWS, and CompTIA.

1. Google Cloud – Professional
Cloud Security Engineer
Exam Dumps

2. Log on to www.testpreptraining.com for real exam dumps
Google Cloud - Professional Cloud Security
Engineer Exam Dumps
1. Google Cloud Directory Sync communicates with Google Identity
Platform over.
A. SSL
B. IGP
C. SFTP
D. ICMP
2. Which page of Configuration Manager in GCDS, you define your LDAP
server information?
A. LDAP Configuration page
B. LDAP page
C. Configuration page
D. General Settings page
3. Which type of roles in Google Cloud IAM, include the Owner, Editor,
and Viewer roles that existed prior to the introduction of Cloud IAM?
A. Primitive role
B. Predefined role
C. Custom role
D. None of these
4. Envelope encryption makes use of _____.
A. only DEK
B. only KEK
C. Both DEK and KEK
D. Depends upon the application
5. How many conditions does an alerting policy can contain up to?
A. 4 conditions
B. 5 conditions
C. 6 conditions
D. 7 conditions

3. Log on to www.testpreptraining.com for real exam dumps
6. By default, Google Kubernetes Engine nodes use
A. Google's Container-Optimized OS
B. Ubuntu
C. Windows
D. None of these
7. Which encryption algorithm is used with Default Encryption in Cloud
Storage?
A. AES-256
B. SHA512
C. MD5
D. 3DES
8. Your company is deploying their applications on Google Kubernetes
Engine. You want to follow Google-recommended practices. What should
you do to ensure that the container images used for new deployments
contain the latest security patches?
A. Use Google-managed base images for all containers.
B. Use Container Analysis to detect vulnerabilities in images.
C. Use an update script as part of every container image startup.
D. Use exclusively private images in Container Registry.
9. Your customer is moving their corporate applications to Google Cloud
Platform. The security team wants detailed visibility of all resources in
the organization. You use Resource Manager to set yourself up as the org
admin. What Cloud Identity and Access Management (Cloud IAM) roles
should you give to the security team?
A. Org viewer, Project owner
B. Org viewer, Project viewer
C. Org admin, Project browser
D. Project owner, Network admin
10. Which of the followings are storage types used with an IaaS solution?
A. Volume and block
B. Structured and object
C. Unstructured and ephemeral
D. Volume and object

4. Log on to www.testpreptraining.com for real exam dumps
Answers
1. A. SSL
2. A. LDAP Configuration page
3. A. Primitive role
4. C. Both DEK and KEK
5. C. 6 conditions
6. A. Google's Container-Optimized OS
7. A. AES-256
8. A. Use Google-managed base images for all containers.
9. B. Org viewer, Project viewer
10. D. Volume and object

5. Microsoft
• Azure Fundamentals (AZ-900)
• Azure Administrator (AZ-103)
• Azure Security (AZ-500)
• Azure AI Solution (AI-100)
• Azure Technologies (AZ-300)
• Azure Architect Design (AZ-
301)
• Azure DevOps Solution (DP-
200)
Amazon (AWS)
• AWS SysOps Administrator
• AWS Solutions Architect
Associate
• AWS Machine Learning
• AWS Alexa Skill Builder
• AWS Big Data – Specialty
• AWS Cloud Practitioner
• AWS Developer - Associate
Google
• GCP Data Engineer
• GCP Cloud Engineer
• GCP DevOps Engineer
• GCP Cloud Network
• GCP Cloud Security
CompTIA
• CompTIA IT Fundamentals
(ITF+)
• CompTIA Project+ (PK0-
004)
• CompTIA Security+ (SY0-
501)
• CompTIA Network+ (N10-
007)
• CompTIA Cloud+ (CV0-
002)
Our Popular Exam Preps