Google Professional Cloud Security Engineer Question 480
Select 3Google Cloud PlatformYou are a security engineer for an organization migrating a critical application to Google Cloud. The application requires a managed database service and virtual machines for compute. During a security review, the team wants to clarify responsibilities under the shared responsibility model. Which of the following are the organization's responsibilities in this scenario?
- A
Configuring IAM policies to control access to the virtual machines and databases
- B
Ensuring the physical security of Google Cloud data centers hosting the application
- C
Applying security patches to the operating system of the virtual machines
- D
Encrypting sensitive application data stored in the managed database
- E
Maintaining the availability of the Google-managed database service
Show answer and explanation
Correct answers: A, C, D
Explanation
In the shared responsibility model, Google Cloud is responsible for the security of the cloud infrastructure, such as physical security, hardware, and availability of managed services. Customers, however, are responsible for securing the resources they create and manage within the cloud, including proper IAM configuration, OS patching for virtual machines, and implementing additional data encryption as required for their applications.
- A. Correct.
Correct. Under the shared responsibility model, the customer is responsible for properly configuring IAM policies to control access to their resources in Google Cloud.
- B. Incorrect.
Incorrect. Physical security of Google Cloud data centers is managed by Google as part of their responsibility in the shared responsibility model.
- C. Correct.
Correct. The customer is responsible for maintaining the virtual machines, including applying security patches to the operating systems they manage.
- D. Correct.
Correct. While Google Cloud ensures encryption at rest and in transit by default, the customer is responsible for implementing application-specific encryption for sensitive data as needed.
- E. Incorrect.
Incorrect. Google Cloud is responsible for maintaining the availability of managed services, such as managed databases, as part of their platform responsibilities.