Logo ExamsQA
Exit
Official Bank 0/314

Professional Cloud Security Engineer Exam (Google Cloud) - Google Cloud Exam Questions

Last updated on July 22, 2026

97% Exam Compliance
314 Total Questions
1
Question
You manage your organization’s Security Operations Center (SOC). You currently monitor and detect network traffic anomalies in your VPCs based on network logs. However, you want to explore your environment using network payloads and headers. Which Google Cloud product should you use?
Options
A Packet Mirroring
B Cloud IDS
C Google Cloud Armor
D VPC Service Controls logs
E VPC Flow Logs
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
You are creating an internal App Engine application that needs to access a user’s Google Drive on the user’s behalf. Your company does not want to rely on the current user’s credentials. It also wants to follow Google- recommended practices.

What should you do?
Options
A Create a new Service account, and give all application users the role of Service Account User.
B Create a new service account, and grant it G Suite domain-wide delegation. Have the application use it to impersonate the user.
C Create a new Service account, and add all application users to a Google Group. Give this group the role of Service Account User.
D Use a dedicated G Suite Admin account, and authenticate the application’s operations with these G Suite credentials.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
A security audit uncovered several inconsistencies in your project’s Identity and Access Management (IAM) configuration. Some service accounts have overly permissive roles, and a few external collaborators have more access than necessary. You need to gain detailed visibility into changes to IAM policies, user activity, service account behavior, and access to sensitive projects. What should you do?
Options
A Deploy the OS Config Management agent to your VMs. Use OS Config Management to create patch management jobs and monitor system modifications.
B Configure Google Cloud Functions to be triggered by changes to IAM policies. Analyze changes by using the policy simulator, send alerts upon risky modifications, and store event details.
C Enable the metrics explorer in Cloud Monitoring to follow the service account authentication events and build alerts linked on it.
D Use Cloud Audit Logs. Create log export sinks to send these logs to a security information and event management (SIEM) solution for correlation with other event sources.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
You are a member of your company's security team. You have been asked to reduce your Linux bastion host external attack surface by removing all public IP addresses. Site Reliability Engineers (SREs) require access to the bastion host from public locations so they can access the internal VPC
while off-site. How should you enable this access?
Options
A Implement Cloud VPN for the region where the bastion host lives.
B Implement Google Cloud Armor in front of the bastion host.
C Implement OS Login with 2-step verification for the bastion host.
D Implement Identity-Aware Proxy TCP forwarding for the bastion host.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
Your team sets up a Shared VPC Network where project co-vpc-prod is the host project. Your team has configured the firewall rules, subnets, and VPN gateway on the host project. They need to enable Engineering Group A to attach a Compute Engine instance to only the 10.1.1.0/24 subnet.

What should your team grant to Engineering Group A to meet this requirement?
Options
A Compute Network User Role at the host project level.
B Compute Shared VPC Admin Role at the service project level.
C Compute Network User Role at the subnet level.
D Compute Shared VPC Admin Role at the host project level.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.