Google Professional Cloud Security Engineer Question 476
Select 2Google Cloud PlatformYou are designing the security architecture for an application that processes sensitive financial data. The application will run on Google Cloud and requires strict control over compute, data, network, and storage resources. Which of the following actions should you take to ensure the application meets the security requirements? (Choose TWO)
- A
Use VPC Service Controls to define a secure perimeter around your resources.
- B
Enable public access to Cloud Storage buckets to make data retrieval faster.
- C
Use Shielded VM instances to protect against rootkit and boot-level attacks.
- D
Disable IAM roles to enforce stricter access control policies.
- E
Enable default network settings to simplify deployment and reduce configuration time.
Show answer and explanation
Correct answers: A, C
Explanation
To ensure the security of an application processing sensitive financial data, it is essential to implement VPC Service Controls to restrict unauthorized access and use Shielded VM instances to protect against boot-level attacks. These steps align with best practices for securing compute, data, network, and storage resources in Google Cloud.
- A. Correct.
VPC Service Controls help define a security perimeter around your resources, reducing the risk of data exfiltration and unauthorized access.
- B. Incorrect.
Enabling public access to Cloud Storage buckets exposes sensitive data to unauthorized users, which violates security best practices.
- C. Correct.
Shielded VM instances provide protection against boot-level attacks and tampering, which is critical for securing sensitive workloads.
- D. Incorrect.
Disabling IAM roles is not a valid approach to enforcing access control. Instead, proper IAM roles and policies should be defined and applied.
- E. Incorrect.
Default network settings are insufficient for securing applications with sensitive data. Customizing network configurations with firewalls and private IPs is necessary for robust security.