Google Professional Cloud Security Engineer Question 483
Select 3Google Cloud PlatformYour organization is migrating a critical application to Google Cloud and plans to use Compute Engine for virtual machines, Cloud Storage for data storage, and Cloud Identity for user management. As a Professional Cloud Security Engineer, you are tasked with evaluating security responsibilities under the shared responsibility model. Which of the following tasks fall under your organization's responsibilities?
- A
Configuring firewall rules to control access to Compute Engine instances
- B
Ensuring physical security of Google Cloud data centers
- C
Encrypting sensitive data before storing it in Cloud Storage
- D
Maintaining the uptime and physical network connectivity of the Google Cloud infrastructure
- E
Managing user permissions and access policies through Cloud Identity
Show answer and explanation
Correct answers: A, C, E
Explanation
Under the shared responsibility model, Google Cloud manages the security of the cloud, such as physical security, infrastructure, and networking. Customers are responsible for security in the cloud, which includes tasks like configuring firewall rules, encrypting data, and managing user permissions. Understanding these responsibilities is crucial for effectively securing workloads and applications on Google Cloud.
- A. Correct.
Correct. Configuring firewall rules is the responsibility of the customer as part of securing their workloads and controlling inbound/outbound traffic.
- B. Incorrect.
Incorrect. Ensuring physical security of data centers is the responsibility of Google Cloud as part of the shared responsibility model.
- C. Correct.
Correct. Encrypting sensitive data before storing it in Cloud Storage is the customer's responsibility to ensure data privacy and security.
- D. Incorrect.
Incorrect. Maintaining the uptime and physical network connectivity of Google Cloud infrastructure is Google's responsibility as part of the shared responsibility model.
- E. Correct.
Correct. Managing user permissions and access policies through Cloud Identity is the customer's responsibility to ensure proper access control.