Google Professional Cloud Developer Question 84
Select 3Google Cloud PlatformYou are developing a web application on Google Cloud that handles sensitive customer information. Which practices should you implement to ensure the application is secure and meets compliance requirements?
- A
Use Identity and Access Management (IAM) roles to restrict access to application resources.
- B
Store sensitive customer data in plaintext in Cloud Storage for quick access.
- C
Encrypt sensitive data both in transit and at rest using Cloud KMS.
- D
Implement input validation and sanitize user inputs to prevent injection attacks.
- E
Allow unrestricted public access to your application’s APIs for faster performance.
Show answer and explanation
Correct answers: A, C, D
Explanation
To design secure applications on Google Cloud, it is important to enforce the principle of least privilege using IAM roles, encrypt sensitive data at all stages, and implement measures like input validation to protect against common vulnerabilities. Avoid practices like storing plaintext data or exposing APIs to the public, as these can lead to serious security breaches.
- A. Correct.
Using IAM roles to restrict access ensures that only authorized users or services can access application resources, minimizing the risk of unauthorized access.
- B. Incorrect.
Storing sensitive customer data in plaintext is a major security risk, as it can be easily accessed and misused if compromised. Encryption should be used instead.
- C. Correct.
Encrypting data in transit and at rest using tools like Cloud KMS helps to protect sensitive information from being intercepted or accessed by unauthorized parties.
- D. Correct.
Input validation and sanitization are crucial to defend against injection attacks, such as SQL injection or cross-site scripting (XSS), that could compromise application security.
- E. Incorrect.
Allowing unrestricted public access to APIs is a security vulnerability that exposes the application to potential abuse and unauthorized data access.