Exam Name: | Google Cloud Certified - Professional Cloud Security Engineer | ||
Exam Code: | Professional-Cloud-Security-Engineer Dumps | ||
Vendor: | Certification: | Google Cloud Certified | |
Questions: | 249 Q&A's | Shared By: | zachariah |
Your organization must follow the Payment Card Industry Data Security Standard (PCI DSS). To prepare for an audit, you must detect deviations at an infrastructure-as-a-service level in your Google Cloud landing zone. What should you do?
You want data on Compute Engine disks to be encrypted at rest with keys managed by Cloud Key Management Service (KMS). Cloud Identity and Access Management (IAM) permissions to these keys must be managed in a grouped way because the permissions should be the same for all keys.
What should you do?
Your security team wants to reduce the risk of user-managed keys being mismanaged and compromised. To achieve this, you need to prevent developers from creating user-managed service account keys for projects in their organization. How should you enforce this?
You want to limit the images that can be used as the source for boot disks. These images will be stored in a dedicated project.
What should you do?