Free Access Google.Professional-Cloud-Security-Engineer.v2022-08-22.q116 Practice Test (Page 18)

Question 81

How should a customer reliably deliver Stackdriver logs from GCP to their on-premises SIEM system?

A.Configure Organizational Log Sinks to export logs to a Cloud Pub/Sub Topic, which will be sent to the SIEM via Dataflow.

B.Configure every project to export all their logs to a common BigQuery DataSet, which will be queried by the SIEM system.

C.Build a connector for the SIEM to query for all logs in real time from the GCP RESTful JSON APIs.

D.Send all logs to the SIEM system via an existing protocol such as syslog.

Question 82

When working with agents in a support center via online chat, an organization's customers often share pictures of their documents with personally identifiable information (PII). The organization that owns the support center is concerned that the PII is being stored in their databases as part of the regular chat logs they retain for review by internal or external analysts for customer service trend analysis.
Which Google Cloud solution should the organization use to help resolve this concern for the customer while still maintaining data utility?

A.Use Cloud Key Management Service (KMS) to encrypt the PII data shared by customers before storing it for analysis.

B.Use Object Lifecycle Management to make sure that all chat records with PII in them are discarded and not saved for analysis.

C.Use the image inspection and redaction actions of the DLP API to redact PII from the images before storing them for analysis.

D.Use the generalization and bucketing actions of the DLP API solution to redact PII from the texts before storing them for analysis.

Question 83

You plan to deploy your cloud infrastructure using a CI/CD cluster hosted on Compute Engine. You want to minimize the risk of its credentials being stolen by a third party. What should you do?

A.Create a dedicated Cloud Identity user account for the cluster. Enable the constraints/iam.disableServiceAccountCreation organization policy at the project level.

B.Create a custom service account for the cluster Enable the constraints/iam.allowServiceAccountCredentialLifetimeExtension organization policy at the project level.

C.Create a dedicated Cloud Identity user account for the cluster. Use a strong self-hosted vault solution to store the user's temporary credentials.

D.Create a custom service account for the cluster Enable the constraints/iam.disableServiceAccountKeyCreation organization policy at the project level.

Question 84

A company's application is deployed with a user-managed Service Account key. You want to use Google-recommended practices to rotate the key.
What should you do?

A.Open Cloud Shell and run gcloud iam service-accounts enable-auto-rotate --iam-.
account=IAM_ACCOUNT

B.Open Cloud Shell and run gcloud iam service-accounts keys rotate --iam-.
account=IAM_ACCOUNT --key=NEW_KEY

C.Create a new key, and use the new key in the application. Delete the old key from the Service Account.

D.Create a new key, and use the new key in the application. Store the old key on the system as a backup key.

Question 85

You need to provide a corporate user account in Google Cloud for each of your developers and operational staff who need direct access to GCP resources. Corporate policy requires you to maintain the user identity in a third-party identity management provider and leverage single sign-on. You learn that a significant number of users are using their corporate domain email addresses for personal Google accounts, and you need to follow Google recommended practices to convert existing unmanaged users to managed accounts.
Which two actions should you take? (Choose two.)

A.Add users to your managed Google account and force users to change the email addresses associated with their personal accounts.

B.Use the Google Admin console to view which managed users are using a personal account for their recovery email.

C.Use the Transfer Tool for Unmanaged Users (TTUU) to find users with conflicting accounts and ask them to transfer their personal Google accounts.

D.Send an email to all of your employees and ask those users with corporate email addresses for personal Google accounts to delete the personal accounts immediately.

E.Use Google Cloud Directory Sync to synchronize your local identity management system to Cloud Identity.

Other Version: 2984Google.Professional-Cloud-Security-Engineer.v2022-10-17.q111; 3087Google.Professional-Cloud-Security-Engineer.v2022-01-23.q100

Latest Upload: 257PaloAltoNetworks.NGFW-Engineer.v2026-05-01.q43; 364Nokia.4A0-113.v2026-05-01.q69; 401EC-COUNCIL.312-49v11.v2026-04-30.q214; 318Microsoft.MB-820.v2026-04-30.q101; 249Salesforce.MC-202.v2026-04-30.q57; 282BICSI.INSTC_V8.v2026-04-29.q53; 420NMLS.MLO.v2026-04-28.q82; 280NCARB.Project-Management.v2026-04-28.q27; 498EMC.D-AV-DY-23.v2026-04-27.q184; 1316ServiceNow.CSA.v2026-04-27.q483

Question 81

Question 82

Question 83

Question 84

Question 85

Download PDF File