Professional-Cloud-Security-Engineer 무료 덤프문제 온라인 액세스

You have numerous private virtual machines on Google Cloud. You occasionally need to manage the servers through Secure Socket Shell (SSH) from a remote location. You want to configure remote access to the servers in a manner that optimizes security and cost efficiency.
What should you do?

• A.Configure server instances with public IP addresses Create a firewall rule to only allow traffic from your corporate IPs.
• B.Create a firewall rule to allow access from the Identity-Aware Proxy (IAP) IP range Grant the role of an IAP- secured Tunnel User to the administrators.
• C.Create a site-to-site VPN from your corporate network to Google Cloud.
• D.Create a jump host instance with public IP Manage the instances by connecting through the jump host.

Your organization is transitioning to Google Cloud You want to ensure that only trusted container images are deployed on Google Kubernetes Engine (GKE) clusters in a project. The containers must be deployed from a centrally managed. Container Registry and signed by a trusted authority.
What should you do?
Choose 2 answers

• A.Configure the Binary Authorization policy with respective attestations for the project.
• B.Enable Pod Security standards and set them to Restricted.
• C.Create a custom organization policy constraint to enforce Binary Authorization for Google Kubernetes Engine (GKE).
• D.Enable Container Threat Detection in the Security Command Center (SCC) for the project.
• E.Configure the trusted image organization policy constraint for the project.

Your company is using GSuite and has developed an application meant for internal usage on Google App Engine. You need to make sure that an external user cannot gain access to the application even when an employee's password has been compromised.
What should you do?

• A.Provision user passwords using GSuite Password Sync.
• B.Enforce 2-factor authentication in GSuite for all users.
• C.Configure Cloud Identity-Aware Proxy for the App Engine Application.
• D.Configure Cloud VPN between your private network and GCP.

Your organization hosts a financial services application running on Compute Engine instances for a third- party company. The third-party company's servers that will consume the application also run on Compute Engine in a separate Google Cloud organization. You need to configure a secure network connection between the Compute Engine instances. You have the following requirements:
The network connection must be encrypted.
The communication between servers must be over private IP addresses.
What should you do?

• A.Configure a Cloud VPN connection between your organization's VPC network and the third party's that is controlled by VPC firewall rules.
• B.Configure a VPC peering connection between your organization's VPC network and the third party's that is controlled by VPC firewall rules.
• C.Configure a VPC Service Controls perimeter around your Compute Engine instances, and provide access to the third party via an access level.
• D.Configure an Apigee proxy that exposes your Compute Engine-hosted application as an API, and is encrypted with TLS which allows access only to the third party.

You are troubleshooting access denied errors between Compute Engine instances connected to a Shared VPC and BigQuery datasets. The datasets reside in a project protected by a VPC Service Controls perimeter. What should you do?

• A.Create a service perimeter between the service project where the Compute Engine instances reside and the host project that contains the Shared VPC.
• B.Create a perimeter bridge between the service project where the Compute Engine instances reside and the perimeter that contains the protected BigQuery datasets.
• C.Add the service project where the Compute Engine instances reside to the service perimeter.
• D.Add the host project containing the Shared VPC to the service perimeter.