Google Cloud
Google Cloud Certified – Professional Cloud Security Engineer
PR000224
Popular Trending
Get certified as a Professional Cloud Security Engineer with exam code PR000224 to validate your security skills in Google Cloud.
483 questions
0 views
Free
Questions 481–483 of 483
Which service is ideal for managing IAM roles?
-
A
Cloud Identity
-
B
Cloud Storage
-
C
Cloud Functions
-
D
BigQuery
Explanation
Cloud Identity is designed for managing IAM roles, while the others focus on storage or processing tasks.
A company needs to ensure that sensitive data is protected in its Cloud Storage buckets. What should they enable?
-
A
Server-side encryption
-
B
Public access
-
C
Cloud Pub/Sub
-
D
Firewall rules
Explanation
Server-side encryption protects data at rest, while other options do not address data security directly.
What happens when you disable a service account in GCP?
-
A
No API calls can be made
-
B
Service account keys remain active
-
C
Existing resources are deleted
-
D
IAM policies are removed
Explanation
Disabling a service account completely prohibits API calls, while keys remain valid unless revoked.