Google Google Certifications PROFESSIONAL-CLOUD-SECURITY-ENGINEER Questions & Answers

• Question 241:

  Your company conducts clinical trials and needs to analyze the results of a recent study that are stored in BigQuery. The interval when the medicine was taken contains start and stop dates. The interval data is critical to the analysis, but specific dates may identify a particular batch and introduce bias. You need to obfuscate the start and end dates for each row and preserve the interval data.

  What should you do?

  A. Use date shifting with the context set to the unique ID of the test subject.

  B. Extract the date using TimePartConfig from each date field and append a random month and year.

  C. Use bucketing to shift values to a predetermined date based on the initial value.

  D. Use the FFX mode of format preserving encryption (FPE) and maintain data consistency.

  Correct Answer: A

  Option A and D works, but the focus here is to preserve the interval data.

  So option A is more suited in this case.

  "Date shifting techniques randomly shift a set of dates but preserve the sequence and duration of a period of time. Shifting dates is usually done in context to an individual or an entity. That is, each individual's dates are shifted by an amount

  of time that is unique to that individual."

• Question 242:

  For compliance reporting purposes, the internal audit department needs you to provide the list of virtual machines (VMs) that have critical operating system (OS) security updates available, but not installed. You must provide this list every six months, and you want to perform this task quickly.

  What should you do?

  A. Run a Security Command Center security scan on all VMs to extract a list of VMs with critical OS vulnerabilities every six months.

  B. Run a gcloud CLI command from the Command Line Interface (CLI) to extract the VM's OS version information every six months.

  C. Ensure that the Cloud Logging agent is installed on all VMs, and extract the OS last update log date every six months.

  D. Ensure the OS Config agent is installed on all VMs and extract the patch status dashboard every six months.

  Correct Answer: D

  https://cloud.google.com/compute/docs/vm-manager

• Question 243:

  Your organization operates Virtual Machines (VMs) with only private IPs in the Virtual Private Cloud (VPC) with internet access through Cloud NAT. Everyday, you must patch all VMs with critical OS updates and provide summary reports. What should you do?

  A. Validate that the egress firewall rules allow any outgoing traffic. Log in to each VM and execute OS specific update commands. Configure the Cloud Scheduler job to update with critical patches daily for daily updates.

  B. Copy the latest patches to the Cloud Storage bucket. Log in to each VM, download the patches from the bucket, and install them.

  C. Assign public IPs to VMs. Validate that the egress firewall rules allow any outgoing traffic. Log in to each VM, and configure a daily cron job to enable for OS updates at night during low activity periods.

  D. Ensure that VM Manager is installed and running on the VMs. In the OS patch management service, configure the patch jobs to update with critical patches dally.

  Correct Answer: D

  VM manager is a suite of tools used to automate managing of the fleet of VMs (including OS patching) https://cloud.google.com/compute/docs/vm-manager

• Question 244:

  Your organization develops software involved in many open source projects and is concerned about software supply chain threats. You need to deliver provenance for the build to demonstrate the software is untampered. What should you do?

  A. 1. Hire an external auditor to review and provide provenance.

  2.

  Define the scope and conditions.

  3.

  Get support from the Security department or representative.

  4.

  Publish the attestation to your public web page.

  B. 1. Review the software process.

  2.

  Generate private and public key pairs and use Pretty Good Privacy (PGP) protocols to sign the output software artifacts together with a file containing the address of your enterprise and point of contact.

  3.

  Publish the PGP signed attestation to your public web page.

  C. 1. Publish the software code on GitHub as open source.

  2. Establish a bug bounty program, and encourage the open source community to review, report, and fix the vulnerabilities.

  D. 1. Generate Supply Chain Levels for Software Artifacts (SLSA) level 3 assurance by using Cloud Build.

  2. View the build provenance in the Security insights side panel within the Google Cloud console.

  Correct Answer: D

  https://cloud.google.com/build/docs/securing-builds/view-build-provenance