Google Professional Cloud Security Engineer Question 478
Select 3Google Cloud PlatformYour organization is planning to migrate a critical application to Google Cloud. As the security engineer, you are tasked with ensuring compliance with the shared responsibility model. Which of the following tasks fall under your organization's responsibility in the shared responsibility model for workloads running on Google Compute Engine (GCE)?
- A
Patching the underlying physical servers hosting the virtual machines
- B
Configuring firewall rules to restrict access to the virtual machines
- C
Encrypting sensitive data stored in the virtual machine disks
- D
Ensuring the operating system running on the virtual machines is up-to-date
- E
Securing the data center where the servers hosting the virtual machines are located
Show answer and explanation
Correct answers: B, C, D
Explanation
In the shared responsibility model for Google Compute Engine, Google Cloud is responsible for managing the underlying infrastructure, including physical security, physical servers, and network infrastructure. The organization, however, is responsible for securing and managing workloads they deploy, such as configuring firewall rules, encrypting data, and keeping the operating system up-to-date. Understanding this division of responsibilities is critical for ensuring the security and compliance of workloads in the cloud.
- A. Incorrect.
Google Cloud is responsible for managing and patching the underlying physical infrastructure, including physical servers. This is part of Google's responsibility in the shared responsibility model.
- B. Correct.
Configuring firewall rules to restrict access to virtual machines is the responsibility of the organization, as it involves securing workloads and applications running on Google Cloud infrastructure.
- C. Correct.
Encrypting sensitive data stored in the virtual machine disks falls under the organization's responsibility. While Google Cloud provides encryption-by-default, the organization is responsible for implementing additional encryption or managing their own keys if required.
- D. Correct.
Ensuring the operating system running on virtual machines is up-to-date is the organization's responsibility. Google Cloud does not manage the guest OS updates for your workloads.
- E. Incorrect.
Google Cloud is responsible for securing its data centers, including physical security. This is not part of the organization's responsibility in the shared responsibility model.