Google Professional Cloud Security Engineer Question 371
Select 3Google Cloud PlatformYour team is deploying a machine learning model for training using both IaaS-hosted and PaaS-hosted approaches on Google Cloud. The team is concerned about securing the data and environments used in the training process. Which security requirements should you prioritize to ensure compliance and data protection?
- A
Enable encryption for data at rest and in transit for both IaaS and PaaS environments.
- B
Restrict access to training environments using Identity and Access Management (IAM) policies.
- C
Deploy a firewall to block all outbound traffic from the training environment.
- D
Use private IPs and VPC Service Controls to isolate training resources.
- E
Ensure the training model has unrestricted access to all Google Cloud APIs to simplify development.
Show answer and explanation
Correct answers: A, B, D
Explanation
To secure IaaS-hosted and PaaS-hosted training models, it is essential to prioritize encryption, access control, and resource isolation. These measures protect sensitive data, prevent unauthorized access, and reduce the attack surface. Blocking all traffic or granting unrestricted API access either hampers functionality or introduces unnecessary risks.
- A. Correct.
Enabling encryption for data at rest and in transit ensures the protection of sensitive data during the training process, which is critical for both IaaS and PaaS models.
- B. Correct.
Restricting access using IAM policies ensures that only authorized users and services can interact with the training environment, reducing the risk of unauthorized access.
- C. Incorrect.
Blocking all outbound traffic is overly restrictive and can disrupt necessary communication required for training, such as accessing datasets or APIs.
- D. Correct.
Using private IPs and VPC Service Controls isolates training resources, reducing the attack surface and ensuring compliance with data residency and security requirements.
- E. Incorrect.
Allowing unrestricted access to all Google Cloud APIs increases security risks and violates the principle of least privilege, which is essential for securing cloud environments.