Google Professional Cloud Developer Question 83
Select 3Google Cloud PlatformYou are designing a web application that processes sensitive user data. To ensure the application is secure, which of the following practices should you implement?
- A
Encrypt sensitive data at rest using Cloud KMS.
- B
Use hardcoded credentials in your application code for database access.
- C
Implement IAM roles with the principle of least privilege for accessing Google Cloud services.
- D
Disable HTTPS for improved performance in your application.
- E
Regularly apply security updates to your application dependencies.
Show answer and explanation
Correct answers: A, C, E
Explanation
Designing secure applications on Google Cloud involves following best practices such as encrypting sensitive data, applying the principle of least privilege for IAM roles, and keeping dependencies up to date. These practices minimize the risk of data breaches, unauthorized access, and exploitation of vulnerabilities. Avoiding insecure practices, such as hardcoding credentials or disabling HTTPS, is equally critical to maintaining the security of your application.
- A. Correct.
Encrypting sensitive data at rest using Cloud KMS ensures that the data is protected even if the storage medium is compromised. This is a key aspect of designing secure applications.
- B. Incorrect.
Hardcoding credentials in application code is a bad practice as it exposes sensitive information and increases the risk of unauthorized access if the code is leaked or shared.
- C. Correct.
Implementing IAM roles with the principle of least privilege ensures that users and services only have the permissions they need, reducing the potential attack surface.
- D. Incorrect.
Disabling HTTPS compromises the security of data in transit, making it vulnerable to interception and attacks such as man-in-the-middle. HTTPS is essential for secure applications.
- E. Correct.
Regularly applying security updates to application dependencies helps mitigate vulnerabilities in third-party libraries and frameworks, which are common attack vectors.