Google Professional Cloud Security Engineer Question 383
Select 2Google Cloud PlatformYour organization is deploying a new application on Google Cloud and wants to ensure security best practices are followed for both infrastructure and application layers. You are tasked with automating security configurations to reduce manual errors and ensure compliance. Which of the following actions should you take? (Select TWO)
- A
Use Infrastructure as Code (IaC) to define and enforce security configurations for resources such as firewalls and IAM roles.
- B
Manually review all application security settings before each deployment to ensure compliance.
- C
Integrate vulnerability scanning tools in your CI/CD pipeline to identify and fix application vulnerabilities early.
- D
Rely on default Google Cloud settings since they are sufficient for most security requirements.
- E
Schedule periodic manual audits to identify misconfigurations in your infrastructure.
Show answer and explanation
Correct answers: A, C
Explanation
Automating security configurations is essential for reducing human error and ensuring consistent enforcement of security policies. Using IaC allows you to define and apply security configurations programmatically, while integrating vulnerability scanning into the CI/CD pipeline ensures that applications are checked for security issues before deployment. These practices align with the goals of automating infrastructure and application security.
- A. Correct.
Using Infrastructure as Code (IaC) provides a repeatable and automated way to enforce consistent security configurations, reducing the risk of manual errors.
- B. Incorrect.
Manually reviewing settings before each deployment is time-consuming, prone to human error, and not scalable for an automated security strategy.
- C. Correct.
Integrating vulnerability scanning tools in your CI/CD pipeline automates the process of identifying and mitigating application vulnerabilities, ensuring secure deployments.
- D. Incorrect.
Default Google Cloud settings may not meet all specific security requirements for your organization, so relying on them is not recommended.
- E. Incorrect.
While manual audits can find misconfigurations, they are not automated and do not align with the goal of automating infrastructure and application security.