ホーム > Google > Google Cloud Certified > Professional-Cloud-Security-Engineer

Google Professional-Cloud-Security-Engineer 問題集

Professional-Cloud-Security-Engineer日本語版
「クリックして表示

」

試験コード：Professional-Cloud-Security-Engineer

試験名称：Google Cloud Certified - Professional Cloud Security Engineer Exam

最近更新時間：2024-04-28

問題と解答：全235問

Professional-Cloud-Security-Engineer 無料でデモをダウンロード：

PDF版 Demo ソフト版 Demo オンライン版 Demo

無料問題集Professional-Cloud-Security-Engineer 資格取得

質問 1：
Your organization hosts a financial services application running on Compute Engine instances for a third-party company. The third-party company's servers that will consume the application also run on Compute Engine in a separate Google Cloud organization. You need to configure a secure network connection between the Compute Engine instances. You have the following requirements:
The network connection must be encrypted.
The communication between servers must be over private IP addresses.
What should you do?
A. Configure a VPC peering connection between your organization's VPC network and the third party's that is controlled by VPC firewall rules.
B. Configure a Cloud VPN connection between your organization's VPC network and the third party's that is controlled by VPC firewall rules.
C. Configure an Apigee proxy that exposes your Compute Engine-hosted application as an API, and is encrypted with TLS which allows access only to the third party.
D. Configure a VPC Service Controls perimeter around your Compute Engine instances, and provide access to the third party via an access level.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 2：
You need to provide a corporate user account in Google Cloud for each of your developers and operational staff who need direct access to GCP resources. Corporate policy requires you to maintain the user identity in a third-party identity management provider and leverage single sign-on. You learn that a significant number of users are using their corporate domain email addresses for personal Google accounts, and you need to follow Google recommended practices to convert existing unmanaged users to managed accounts.
Which two actions should you take? (Choose two.)
A. Use Google Cloud Directory Sync to synchronize your local identity management system to Cloud Identity.
B. Use the Transfer Tool for Unmanaged Users (TTUU) to find users with conflicting accounts and ask them to transfer their personal Google accounts.
C. Use the Google Admin console to view which managed users are using a personal account for their recovery email.
D. Send an email to all of your employees and ask those users with corporate email addresses for personal Google accounts to delete the personal accounts immediately.
E. Add users to your managed Google account and force users to change the email addresses associated with their personal accounts.
正解：A,B
解説: (Topexam メンバーにのみ表示されます)

質問 3：
A customer's data science group wants to use Google Cloud Platform (GCP) for their analytics workloads.
Company policy dictates that all data must be company-owned and all user authentications must go through their own Security Assertion Markup Language (SAML) 2.0 Identity Provider (IdP). The Infrastructure Operations Systems Engineer was trying to set up Cloud Identity for the customer and realized that their domain was already being used by G Suite.
How should you best advise the Systems Engineer to proceed with the least disruption?
A. Contact Google Support and initiate the Domain Contestation Process to use the domain name in your new Cloud Identity domain.
B. Register a new domain name, and use that for the new Cloud Identity domain.
C. Ask customer's management to discover any other uses of Google managed services, and work with the existing Super Administrator.
D. Ask Google to provision the data science manager's account as a Super Administrator in the existing domain.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 4：
A customer terminates an engineer and needs to make sure the engineer's Google account is automatically deprovisioned.
What should the customer do?
A. Configure Cloud Directory Sync with their directory service to remove their IAM permissions in Cloud Identity.
B. Configure Cloud Directory Sync with their directory service to provision and deprovision users from Cloud Identity.
C. Use the Cloud SDK with their directory service to provision and deprovision users from Cloud Identity.
D. Use the Cloud SDK with their directory service to remove their IAM permissions in Cloud Identity.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 5：
You are a Security Administrator at your organization. You need to restrict service account creation capability within production environments. You want to accomplish this centrally across the organization. What should you do?
A. Use organization policy constraints/iam.disableServiceAccountKeyCreation boolean to disable the creation of new service accounts.
B. Use Identity and Access Management (IAM) to restrict access of all users and service accounts that have access to the production environment.
C. Use organization policy constraints/iam.disableServiceAccountCreation boolean to disable the creation of new service accounts.
D. Use organization policy constraints/iam.disableServiceAccountKeyUpload boolean to disable the creation of new service accounts.
正解：C

質問 6：
A customer implements Cloud Identity-Aware Proxy for their ERP system hosted on Compute Engine. Their security team wants to add a security layer so that the ERP systems only accept traffic from Cloud Identity- Aware Proxy.
What should the customer do to meet these requirements?
A. Make sure that the ERP system can validate the x-forwarded-for headers in the HTTP requests.
B. Make sure that the ERP system can validate the user's unique identifier headers in the HTTP requests.
C. Make sure that the ERP system can validate the identity headers in the HTTP requests.
D. Make sure that the ERP system can validate the JWT assertion in the HTTP requests.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 7：
A retail customer allows users to upload comments and product reviews. The customer needs to make sure the text does not include sensitive data before the comments or reviews are published.
Which Google Cloud Service should be used to achieve this?
A. Cloud Security Scanner
B. Cloud Data Loss Prevention API
C. BigQuery
D. Cloud Key Management Service
正解：B

質問 8：
Your company wants to determine what products they can build to help customers improve their credit scores depending on their age range. To achieve this, you need tojoin user information in the company's banking app with customers' credit score data received from a third party. While using this raw data will allow you to complete this task, it exposes sensitive data, which could be propagated into new systems.
This risk needs to be addressed using de-identification and tokenization with Cloud Data Loss Prevention while maintaining the referential integrity across the database. Which cryptographic token format should you use to meet these requirements?
A. Format-preserving encryption
B. Cryptographic hashing
C. Secure, key-based hashes
D. Deterministic encryption
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 9：
Your organization is rolling out a new continuous integration and delivery (CI/CD) process to deploy infrastructure and applications in Google Cloud Many teams will use their own instances of the CI/CD workflow It will run on Google Kubernetes Engine (GKE) The CI/CD pipelines must be designed to securely access Google Cloud APIs What should you do?
A. * 1 Create individual service accounts (or each deployment pipeline
*2 Add an identifier for the pipeline in the service account naming convention
*3 Ensure each pipeline runs on dedicated pods
*4 Use workload identity to map a deployment pipeline pod with a service account
B. *1 Create service accounts for each deployment pipeline
*2 Generate private keys for the service accounts
*3 Securely store the private keys as Kubernetes secrets accessible only by the pods that run the specific deploy pipeline
C. *1 Create two service accounts one for the infrastructure and one for the application deployment
*2 Use workload identities to let the pods run the two pipelines and authenticate with the service accounts
*3 Run the infrastructure and application pipelines in separate namespaces
D. *1 Create a dedicated service account for the CI/CD pipelines
*2 Run the deployment pipelines in a dedicated nodes pool in the GKE cluster
*3 Use the service account that you created as identity for the nodes in the pool to authenticate to the Google Cloud APIs
正解：A

Google Professional-Cloud-Security-Engineer 認定試験の出題範囲：

トピック	出題範囲
トピック 1	Design and Implement a secure infrastructure on Google Cloud Platform
トピック 2	Understanding of security best practices and industry security requirements
トピック 3	All aspects of Cloud Secur
トピック 4	Manages a secure infrastructure leveraging Google security technologies

参照：https://cloud.google.com/certification/cloud-security-engineer

TopExamは君にProfessional-Cloud-Security-Engineerの問題集を提供して、あなたの試験への復習にヘルプを提供して、君に難しい専門知識を楽に勉強させます。TopExamは君の試験への合格を期待しています。

一年間の無料更新サービスを提供します

君が弊社のGoogle Professional-Cloud-Security-Engineerをご購入になってから、我々の承諾する一年間の更新サービスが無料で得られています。弊社の専門家たちは毎日更新状態を検査していますから、この一年間、更新されたら、弊社は更新されたGoogle Professional-Cloud-Security-Engineerをお客様のメールアドレスにお送りいたします。だから、お客様はいつもタイムリーに更新の通知を受けることができます。我々は購入した一年間でお客様がずっと最新版のGoogle Professional-Cloud-Security-Engineerを持っていることを保証します。

弊社のGoogle Professional-Cloud-Security-Engineerを利用すれば試験に合格できます

弊社のGoogle Professional-Cloud-Security-Engineerは専門家たちが長年の経験を通して最新のシラバスに従って研究し出した勉強資料です。弊社はProfessional-Cloud-Security-Engineer問題集の質問と答えが間違いないのを保証いたします。

この問題集は過去のデータから分析して作成されて、カバー率が高くて、受験者としてのあなたを助けて時間とお金を節約して試験に合格する通過率を高めます。我々の問題集は的中率が高くて、100％の合格率を保証します。我々の高質量のGoogle Professional-Cloud-Security-Engineerを利用すれば、君は一回で試験に合格できます。

弊社は無料Google Professional-Cloud-Security-Engineerサンプルを提供します

お客様は問題集を購入する時、問題集の質量を心配するかもしれませんが、我々はこのことを解決するために、お客様に無料Professional-Cloud-Security-Engineerサンプルを提供いたします。そうすると、お客様は購入する前にサンプルをダウンロードしてやってみることができます。君はこのProfessional-Cloud-Security-Engineer問題集は自分に適するかどうか判断して購入を決めることができます。

Professional-Cloud-Security-Engineer試験ツール：あなたの訓練に便利をもたらすために、あなたは自分のペースによって複数のパソコンで設置できます。

弊社は失敗したら全額で返金することを承諾します

我々は弊社のProfessional-Cloud-Security-Engineer問題集に自信を持っていますから、試験に失敗したら返金する承諾をします。我々のGoogle Professional-Cloud-Security-Engineerを利用して君は試験に合格できると信じています。もし試験に失敗したら、我々は君の支払ったお金を君に全額で返して、君の試験の失敗する経済損失を減少します。

安全的な支払方式を利用しています

Credit Cardは今まで全世界の一番安全の支払方式です。少数の手続きの費用かかる必要がありますとはいえ、保障があります。お客様の利益を保障するために、弊社のProfessional-Cloud-Security-Engineer問題集は全部Credit Cardで支払われることができます。

領収書について：社名入りの領収書が必要な場合、メールで社名に記入していただき送信してください。弊社はPDF版の領収書を提供いたします。

Professional-Cloud-Security-Engineer 関連試験: Professional-Collaboration-Engineer - Google Cloud Certified - Professional Collaboration Engineer; Professional-Cloud-Architect-JPN - Google Certified Professional - Cloud Architect (GCP) (Professional-Cloud-Architect日本語版); Professional-Cloud-Security-Engineer-JPN - Google Cloud Certified - Professional Cloud Security Engineer Exam (Professional-Cloud-Security-Engineer日本語版); Professional-Collaboration-Engineer-JPN - Google Cloud Certified - Professional Collaboration Engineer (Professional-Collaboration-Engineer日本語版); Professional-Data-Engineer - Google Certified Professional Data Engineer Exam

連絡方法: [email protected] サポート

人気のベンダー: Apple; Avaya; CIW; FileMaker; Lotus; Lpi; OMG; SNIA; Symantec; XML Master; Zend-Technologies; The Open Group; H3C; 3COM; ACI

TopExam問題集を選ぶ理由は何でしょうか？: 品質保証TopExamは我々の専門家たちの努力によって、過去の試験のデータが分析されて、数年以来の研究を通して開発されて、多年の研究への整理で、的中率が高くて99％の通過率を保証することができます。; 一年間の無料アップデートTopExamは弊社の商品をご購入になったお客様に一年間の無料更新サービスを提供することができ、行き届いたアフターサービスを提供します。弊社は毎日更新の情況を検査していて、もし商品が更新されたら、お客様に最新版をお送りいたします。お客様はその一年でずっと最新版を持っているのを保証します。; 全額返金弊社の商品に自信を持っているから、失敗したら全額で返金することを保証します。弊社の商品でお客様は試験に合格できると信じていますとはいえ、不幸で試験に失敗する場合には、弊社はお客様の支払ったお金を全額で返金するのを承諾します。(全額返金); ご購入の前の試用TopExamは無料なサンプルを提供します。弊社の商品に疑問を持っているなら、無料サンプルを体験することができます。このサンプルの利用を通して、お客様は弊社の商品に自信を持って、安心で試験を準備することができます。