Logo ExamsQA
Exit
Official Bank 0/314

Professional Cloud Security Engineer Exam (Google Cloud) - Google Cloud Exam Questions

Last updated on July 22, 2026

97% Exam Compliance
314 Total Questions
1
Question
You discovered that sensitive personally identifiable information (PII) is being ingested to your Google Cloud environment in the daily ETL process from an on-premises environment to your BigQuery datasets. You need to redact this data to obfuscate the PII, but need to re-identify it for data analytics purposes. Which components should you use in your solution? (Choose two.)
Select 2
Options
A Cloud Data Loss Prevention with deterministic encryption using AES-SIV
B Secret Manager
C Cloud Data Loss Prevention with automatic text redaction
D Cloud Key Management Service
E Cloud Data Loss Prevention with cryptographic hashing
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
Your organization leverages folders to represent different teams within your Google Cloud environment. To support Infrastructure as Code (IaC) practices, each team receives a dedicated
service account upon onboarding. You want to ensure that teams have comprehensive permissions
to manage resources within their assigned folders while adhering to the principle of least privilege. You must design the permissions for these team-based service accounts in the most effective way possible. What should you do?
Options
A Grant each service account the folder administrator role on its respective folder.
B Assign each service account the folder IAM administrator role on its respective folder to allow teams to create and manage additional custom roles if needed.
C Grant each service account the project creator role at the organization level and use folder-level IAM conditions to restrict project creation to specific folders. Reddit
D Assign each service account the project editor role at the organization level and instruct teams to use IAM bindings at the folder level for fine-grained permissions.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
You are the project owner for a regulated workload that runs in a project you own and manage as an Identity and Access Management (IAM) admin. For an upcoming audit, you need to provide access reviews evidence. Which tool should you use?
Options
A Policy Troubleshooter
B Policy Simulator
C Policy Analyzer
D IAM Recommender
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
Your application is deployed as a highly available cross-region solution behind a global external HTTP(S) load balancer. You notice significant spikes in traffic from multiple IP addresses but it is unknown whether the IPs are malicious. You are concerned about your application's availability. You want to limit traffic from these clients over a specified time interval.

What should you do?
Options
A Configure a rate_based_ban action by using Google Cloud Armor and set the ban_duration_sec parameter to the specified time interval.
B Configure a firewall rule in your VPC to throttle traffic from the identified IP addresses.
C Configure a deny action by using Google Cloud Armor to deny the clients that issued too many requests over the specified time interval.
D Configure a throttle action by using Google Cloud Armor to limit the number of requests per client over a specified time interval.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
You manage your organization’s Security Operations Center (SOC). You currently monitor and detect network traffic anomalies in your VPCs based on network logs. However, you want to explore your environment using network payloads and headers. Which Google Cloud product should you use?
Options
A Packet Mirroring
B Cloud IDS
C Google Cloud Armor
D VPC Service Controls logs
E VPC Flow Logs
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.