Google CloudExpert levelPage 2 of 5

Google Professional Cloud Security Engineer exam dumps: questions 101 to 200 of 500

Page 2 of the free Google Professional Cloud Security Engineer question bank for the Professional Cloud Security Engineer exam. Questions 101 to 200 are listed below, the first 5 in full with answers and explanations. Back to page 1 for the exam overview and FAQ.

Question bank last updated January 2025

Start timed practice exam Questions 101 to 200

Free Google Professional Cloud Security Engineer practice questions

Questions 101 to 105 of 500

Pick an answer before you open the explanation. Each question also has its own page with a permalink.

Google Professional Cloud Security Engineer Question 101

Select 3Google Cloud Platform

Your company uses Google Workspace for identity management and you need to configure access to an internal application hosted on Google Cloud. The application requires users to authenticate via SAML, but you also want to enable API access for automation using OAuth tokens. What steps should you take to set this up securely?

  1. A

    Configure a SAML identity provider (IdP) in Google Workspace and link it to the application.

  2. B

    Set up an OAuth 2.0 client ID in Google Cloud and configure the application to use it for API access.

  3. C

    Enable Google Cloud's Identity-Aware Proxy (IAP) for the application to enforce OAuth-based authentication.

  4. D

    Create service accounts for each user and distribute private keys to them for API access.

  5. E

    Configure the application's metadata in the IdP to establish a trust relationship for SAML authentication.

Show answer and explanation

Correct answers: A, B, E

Explanation

To securely configure both SAML authentication for user access and OAuth for API access, you must set up a SAML identity provider (IdP) in Google Workspace, configure the application's metadata in the IdP, and establish an OAuth 2.0 client ID for API usage. These steps ensure that user authentication and API access are handled securely and according to best practices.

  • A. Correct.

    Correct: Setting up a SAML identity provider (IdP) in Google Workspace is necessary to enable SAML-based authentication for the application.

  • B. Correct.

    Correct: To enable API access via OAuth, you need to configure an OAuth 2.0 client ID in Google Cloud.

  • C. Incorrect.

    Incorrect: Identity-Aware Proxy (IAP) is not required in this scenario. While it can provide additional security, the question does not specify its use.

  • D. Incorrect.

    Incorrect: Distributing private keys for service accounts to users is not a secure or recommended practice for API access.

  • E. Correct.

    Correct: The application's metadata must be configured in the IdP to establish a trust relationship, which is a key component of SAML authentication.

Google Professional Cloud Security Engineer Question 102

Select 3Google Cloud Platform

Your organization has mandated 2-step verification for all employees to enhance account security. As a Google Cloud Security Engineer, you need to enforce 2-step verification for all users in your Google Cloud organization and ensure compliance. Which steps should you take to achieve this?

  1. A

    Enable 2-Step Verification in the 'Security' section of the Google Workspace Admin console.

  2. B

    Set up an enforcement policy for 2-Step Verification under 'Security settings' in the Google Workspace Admin console.

  3. C

    Notify users to voluntarily enable 2-Step Verification on their accounts if they feel it is necessary.

  4. D

    Use the Google Cloud Resource Manager to enforce 2-Step Verification across all projects.

  5. E

    Configure a policy in the Admin console to make 2-Step Verification mandatory for all users.

  6. F

    Review the security audit log in the Google Workspace Admin console to track compliance with 2-Step Verification.

Show answer and explanation

Correct answers: A, B, E

Explanation

To enforce 2-Step Verification organization-wide, you must configure and enable it in the Google Workspace Admin console. This includes enabling the feature, creating an enforcement policy, and making it mandatory for all users. The Google Cloud Resource Manager is irrelevant to this configuration, and voluntary user action does not ensure compliance. While auditing compliance is useful, it does not constitute enforcement.

  • A. Correct.

    This is correct. Enabling 2-Step Verification in the Google Workspace Admin console is the first step to configuring it for your organization.

  • B. Correct.

    This is correct. Setting up an enforcement policy ensures that users are required to comply with the 2-Step Verification configuration.

  • C. Incorrect.

    This is incorrect. Relying on voluntary user action does not enforce the use of 2-Step Verification and does not meet organizational security requirements.

  • D. Incorrect.

    This is incorrect. The Google Cloud Resource Manager is not used for configuring 2-Step Verification; this is managed in the Google Workspace Admin console.

  • E. Correct.

    This is correct. Configuring a mandatory policy ensures that 2-Step Verification is enforced for all users without exception.

  • F. Incorrect.

    This is incorrect. While reviewing the security audit log is a good practice for tracking compliance, it is not part of the configuration or enforcement process for 2-Step Verification.

Google Professional Cloud Security Engineer Question 103

Select 3Google Cloud Platform

Your organization requires all employees to use 2-Step Verification (2SV) when accessing Google Cloud resources. You have been tasked with ensuring compliance by configuring and enforcing 2SV across your Google Workspace domain. Which steps should you take to enforce 2-Step Verification for all users in the organization?

  1. A

    Enable 2-Step Verification in the Google Workspace Admin console under Security settings.

  2. B

    Configure an enforcement policy for 2-Step Verification under the Google Workspace Admin console.

  3. C

    Notify users to voluntarily enable 2-Step Verification in their Google accounts.

  4. D

    Set up a security key as the only allowed 2-Step Verification method for all users.

  5. E

    Monitor the 2-Step Verification enforcement status using the Google Workspace reports.

Show answer and explanation

Correct answers: A, B, E

Explanation

To enforce 2-Step Verification in Google Workspace, you must enable the feature, configure an enforcement policy, and monitor compliance. Merely notifying users to enable 2-Step Verification or configuring specific methods without enforcement does not ensure organizational compliance. Monitoring through reports allows you to identify any users who are still non-compliant.

  • A. Correct.

    Correct. Enabling 2-Step Verification in the Google Workspace Admin console is the first step to making the feature available to all users.

  • B. Correct.

    Correct. Configuring an enforcement policy ensures that all users are required to use 2-Step Verification, which is necessary to enforce compliance.

  • C. Incorrect.

    Incorrect. While notifying users is a good practice, relying on voluntary adoption does not enforce compliance with the organizational policy.

  • D. Incorrect.

    Incorrect. Security keys can be configured as one of the allowed methods, but enforcing only one method (e.g., security keys) is not mandatory to configure 2-Step Verification.

  • E. Correct.

    Correct. Monitoring the enforcement status through reports is essential to verify whether all users are compliant with the 2-Step Verification policy.

Google Professional Cloud Security Engineer Question 104

Select 2Google Cloud Platform

Your organization requires all users to enable 2-step verification (2SV) for enhanced account security. As a Professional Cloud Security Engineer, you need to ensure that 2SV is configured and enforced across all accounts in the Google Workspace. What actions must you take to meet this requirement?

  1. A

    Set up an organizational policy to enforce 2-step verification in Google Workspace Admin Console.

  2. B

    Enable 2-step verification for all users in the Google Cloud Console under the Security section.

  3. C

    Create a group in Google Workspace with a security policy requiring 2-step verification and add all users to this group.

  4. D

    Use the Security Settings in Google Workspace Admin Console to set enforcement for 2-step verification.

  5. E

    Communicate to all users that they must enable 2-step verification on their accounts manually.

Show answer and explanation

Correct answers: A, D

Explanation

To enforce 2-step verification for all users, you must configure it through the Google Workspace Admin Console. This can be done either through setting an organizational policy or using the Security Settings. Relying on user actions or partial group policies will not ensure compliance across the organization.

  • A. Correct.

    Correct. Enforcing 2-step verification through the Google Workspace Admin Console is required to ensure compliance across the organization.

  • B. Incorrect.

    Incorrect. The Google Cloud Console does not manage 2-step verification settings for Google Workspace accounts. 2SV is managed through the Google Workspace Admin Console.

  • C. Incorrect.

    Incorrect. While creating a group with security policies is an option for managing specific users, it is not sufficient to enforce 2-step verification for all users organization-wide.

  • D. Correct.

    Correct. The Security Settings in the Google Workspace Admin Console allow you to enforce 2-step verification for users effectively.

  • E. Incorrect.

    Incorrect. Simply communicating to users is not sufficient to enforce 2-step verification. Admin-level enforcement is required.

Google Professional Cloud Security Engineer Question 105

Select 2Google Cloud Platform

Your organization uses Google Workspace, and as a security engineer, you are tasked with ensuring that all users in the organization must use 2-step verification (2SV) to access their accounts. Additionally, you need to configure the environment so that users cannot disable 2SV from their account settings. What steps should you take to achieve this?

  1. A

    Enable 2-step verification for all users in the Google Workspace Admin Console.

  2. B

    Set the enforcement policy for 2-step verification in the Google Workspace Admin Console to 'Enforce'.

  3. C

    Instruct users to enable 2-step verification manually in their account settings.

  4. D

    Disable the option for users to turn off 2-step verification in the Google Workspace Admin Console.

  5. E

    Set up a policy in the Access Context Manager to enforce 2-step verification.

Show answer and explanation

Correct answers: A, B

Explanation

To enforce 2-step verification for all users in Google Workspace, you need to enable it and configure the enforcement policy in the Admin Console. This ensures compliance and prevents users from bypassing the security requirement. Other options like relying on manual setup by users or using unrelated tools like Access Context Manager will not fulfill the requirement.

  • A. Correct.

    Correct: Enabling 2-step verification in the Google Workspace Admin Console is the first step to enforce 2SV for all users.

  • B. Correct.

    Correct: Setting the enforcement policy to 'Enforce' ensures that 2-step verification becomes mandatory for all users, and they cannot bypass this requirement.

  • C. Incorrect.

    Incorrect: While users can enable 2-step verification manually, this approach does not enforce it across the organization or prevent users from disabling it.

  • D. Incorrect.

    Incorrect: There is no specific setting in the Google Workspace Admin Console to 'disable the option' for users to turn off 2-step verification. Enforcement policies handle this.

  • E. Incorrect.

    Incorrect: Access Context Manager is not used to enforce 2-step verification; it is used for context-aware access policies.

Timed practice exam

Take a Google Professional Cloud Security Engineer practice test under exam conditions

60 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam

Google Professional Cloud Security Engineer practice questions 101 to 200 of 500

Every question has a page with the answer and explanation. Numbers are stable, so you can bookmark or share them. The bank is split into 5 pages of up to 100 questions.

  1. 101.Your company uses Google Workspace for identity management and you need to configure access to an internal...
  2. 102.Your organization has mandated 2-step verification for all employees to enhance account security. As a Google...
  3. 103.Your organization requires all employees to use 2-Step Verification (2SV) when accessing Google Cloud...
  4. 104.Your organization requires all users to enable 2-step verification (2SV) for enhanced account security. As a...
  5. 105.Your organization uses Google Workspace, and as a security engineer, you are tasked with ensuring that all...
  6. 106.Your organization requires all employees to use 2-step verification for accessing Google Cloud resources. As...
  7. 107.Your organization uses Google Workspace, and you have been tasked with ensuring all users are required to use...
  8. 108.Your company is developing a new application on Google Cloud that will leverage Cloud Storage to store...
  9. 109.Your organization is using Google Cloud IAM to manage role-based access control for a critical application....
  10. 110.Your organization uses Google Cloud to host a critical application. The application requires granular access...
  11. 111.You are tasked with securing access to a sensitive Google Cloud project used by the finance team. The project...
  12. 112.Your organization is using Google Cloud to host a multi-tier application. The front-end tier and back-end...
  13. 113.Your organization uses Google Cloud and has recently onboarded a team of contractors who need limited access...
  14. 114.Your organization uses Google Cloud to host its applications and data. To comply with security best...
  15. 115.Your organization requires that no single user should have the ability to both manage IAM policies and delete...
  16. 116.Your organization uses multiple Google Cloud projects to manage different environments (development, staging,...
  17. 117.Your organization is using Google Cloud and wants to implement the principle of least privilege to manage...
  18. 118.Your organization is using Google Cloud to host a critical application. To maintain security best practices,...
  19. 119.Your organization uses Google Cloud and wants to enforce the principle of least privilege while managing IAM...
  20. 120.Your organization is using Google Cloud Storage to store sensitive files. The security team has identified...
  21. 121.Your organization recently implemented a Google Cloud Storage bucket to store sensitive files. You want to...
  22. 122.Your organization uses a Google Cloud Storage bucket to store sensitive financial data. You have been tasked...
  23. 123.Your organization uses a Google Cloud Storage bucket to store sensitive financial data. You are tasked with...
  24. 124.Your organization uses Google Cloud Storage to host sensitive financial reports. A junior engineer has...
  25. 125.Your company wants to secure access to a Google Cloud Storage bucket containing sensitive financial data. The...
  26. 126.Your organization uses a Google Cloud Storage bucket to store sensitive financial reports. You need to ensure...
  27. 127.Your organization has a Google Cloud project where access to a sensitive dataset in BigQuery must be tightly...
  28. 128.Your organization uses Google Cloud for managing resources and has several teams working on different...
  29. 129.You are a security engineer for a company that uses Google Cloud. The company requires that only members of...
  30. 130.Your organization wants to allow users in the 'dev-team@example.com' group to access a Cloud Storage bucket,...
  31. 131.Your organization uses Google Cloud to host sensitive data and requires fine-grained control over access. You...
  32. 132.You are designing access control policies for a company's Google Cloud environment. The company wants to...
  33. 133.Your organization is migrating to Google Cloud and has strict security policies requiring the enforcement of...
  34. 134.Your company uses Google Cloud and manages multiple projects, each belonging to different departments such as...
  35. 135.Your organization has multiple teams working on different projects under a single Google Cloud Organization....
  36. 136.Your organization uses Google Cloud, and you have been tasked with setting up access control for a project....
  37. 137.Your organization is adopting the principle of least privilege for managing access to Google Cloud resources....
  38. 138.Your organization has implemented Access Context Manager to regulate access to specific Google Cloud...
  39. 139.Your organization wants to restrict access to a sensitive internal application hosted on Google Cloud based...
  40. 140.A company wants to restrict access to its internal Google Cloud web application so that only employees...
  41. 141.Your organization uses Google Cloud and wants to restrict access to specific resources based on the...
  42. 142.You are a security engineer at an organization that uses Google Cloud. Your team wants to restrict access to...
  43. 143.Your organization requires that only employees accessing Google Cloud resources from corporate devices and...
  44. 144.Your organization uses Google Cloud to host multiple applications. As a security engineer, you are tasked...
  45. 145.Your organization uses Google Cloud and wants to ensure that IAM policies are not overly permissive. You are...
  46. 146.Your organization uses Google Cloud and wants to ensure that IAM roles are assigned with the principle of...
  47. 147.Your organization uses Google Cloud IAM extensively to manage access across multiple projects and resources....
  48. 148.Your organization uses Google Cloud and has several IAM roles assigned to users across projects. You notice...
  49. 149.Your organization uses Google Cloud IAM to manage permissions across projects. The security team is concerned...
  50. 150.Your organization is using Google Cloud IAM to manage permissions for multiple projects. The security team...
  51. 151.Your organization is using Google Cloud IAM to manage access to resources. To simplify permission management,...
  52. 152.Your organization uses Google Cloud IAM to securely manage permissions across projects. You have been tasked...
  53. 153.Your organization uses Google Cloud and has multiple projects with different teams managing each. To simplify...
  54. 154.Your organization uses Google Cloud and needs to manage permissions for a team of developers who work on a...
  55. 155.Your organization uses Google Cloud Identity and Access Management (IAM) to manage permissions. To streamline...
  56. 156.Your organization uses Google Cloud and needs to enforce just-in-time access for administrators who manage...
  57. 157.Your organization has a policy that requires users to have elevated permissions only when performing certain...
  58. 158.Your organization uses Google Cloud for its infrastructure and has a strict security policy requiring...
  59. 159.Your organization uses Google Cloud to manage critical workloads. Recently, the security team identified that...
  60. 160.Your organization requires that certain administrative tasks in Google Cloud be restricted to privileged...
  61. 161.Your organization needs to restrict elevated permissions for high-risk tasks to specific users on a...
  62. 162.Your organization is planning to migrate its workloads to Google Cloud. As the Professional Cloud Security...
  63. 163.You are designing a Google Cloud resource hierarchy for a multinational organization. The organization has...
  64. 164.Your organization is planning to migrate its workloads to Google Cloud and needs a resource hierarchy design...
  65. 165.Your organization is planning to migrate to Google Cloud and wants to ensure proper isolation and access...
  66. 166.You are designing the resource hierarchy for a large organization with multiple departments. Each department...
  67. 167.Your company has recently adopted Google Cloud and plans to use multiple projects for isolated workloads. You...
  68. 168.Your organization has recently undergone significant growth, resulting in a large number of Google Cloud...
  69. 169.Your organization has multiple teams that manage projects and folders in Google Cloud. Each team should only...
  70. 170.Your organization has a complex Google Cloud hierarchy consisting of multiple folders and over 50 projects....
  71. 171.Your organization is rapidly expanding and managing hundreds of Google Cloud projects under various...
  72. 172.Your organization needs to set up an enterprise-level folder and project hierarchy in Google Cloud to manage...
  73. 173.Your organization is managing hundreds of Google Cloud projects across multiple teams. To ensure consistent...
  74. 174.Your organization uses Google Cloud and has a strict security policy requiring projects to restrict the...
  75. 175.Your organization wants to enforce a policy that restricts the creation of external IP addresses for all...
  76. 176.Your organization uses Google Cloud and requires strict control over the locations where resources can be...
  77. 177.Your organization has a policy requiring that no external IP addresses are assigned to virtual machines (VMs)...
  78. 178.Your organization requires that all new Cloud Storage buckets across all projects must be encrypted with...
  79. 179.Your organization requires that no external IP addresses are assigned to virtual machines (VMs) across all...
  80. 180.Your organization uses Google Cloud and has created a resource hierarchy with three levels: Organization...
  81. 181.Your organization is setting up a new Google Cloud project for a sensitive financial application. You need to...
  82. 182.Your company uses Google Cloud and has a resource hierarchy with the following structure: an organization...
  83. 183.Your company has recently adopted Google Cloud and implemented a resource hierarchy consisting of an...
  84. 184.Your organization has a Google Cloud resource hierarchy that includes an Organization node, multiple folders,...
  85. 185.Your organization is using Google Cloud and has a resource hierarchy with the following structure:...
  86. 186.You are designing the perimeter security for an application hosted on Google Cloud. The application requires...
  87. 187.Your organization hosts a web application on Google Cloud, and you are tasked with designing perimeter...
  88. 188.You are designing the perimeter security for an organization's Google Cloud environment. The organization...
  89. 189.You are tasked with designing the perimeter security for a Google Cloud project that hosts a web application....
  90. 190.Your organization has a hybrid cloud setup and wants to implement perimeter security to protect workloads...
  91. 191.Your organization is deploying a web application on Google Cloud and needs to ensure that the application is...
  92. 192.Your company runs a web application on Google Cloud that is accessed by both internal employees and external...
  93. 193.Your organization hosts a public-facing web application on Google Cloud that processes sensitive customer...
  94. 194.Your organization has deployed a web application on Google Cloud that must serve users over HTTPS. The...
  95. 195.Your company hosts a web application on Google Cloud. The application is exposed to the internet through an...
  96. 196.Your organization hosts a web application on Google Cloud that needs to be accessible to users worldwide. The...
  97. 197.Your organization is hosting a web application on Google Cloud that must be accessible to authenticated users...
  98. 198.Your organization is deploying a new web application in Google Cloud, and you are tasked with setting up...
  99. 199.Your organization has deployed a set of web applications hosted on Google Cloud. To enhance security, you...
  100. 200.Your organization is deploying Cloud NGFW for application layer (Layer 7) inspection to filter traffic based...

More Google Cloud exam dumps

All Google Cloud exams
374 questions

Google Associate Cloud Engineer exam dumps

Associate Cloud Engineer

258 questions

Google Professional Cloud Database Engineer exam dumps

Professional Cloud Database Engineer

266 questions

Google Professional Cloud DevOps Engineer exam dumps

Professional Cloud DevOps Engineer

480 questions

Google Professional Cloud Developer exam dumps

Professional Cloud Developer

789 questions

Google Professional Cloud Network Engineer exam dumps

Professional Cloud Network Engineer

278 questions

Google Professional Data Engineer exam dumps

Professional Data Engineer

521 questions

Google Professional Machine Learning Engineer exam dumps

Professional Machine Learning Engineer