You are a member of the security team at an organization. Your team has a single GCP project with credit card payment processing systems alongside web applications and data processing systems. You want to reduce the scope of systems subject to PCI audit standards.
What should you do?

• A.Use multi-factor authentication for admin access to the web application.
• B.Use only applications certified compliant with PA-DSS.
• C.Move the cardholder data environment into a separate GCP project.
• D.Use VPN for all connections between your office and cloud environments.

Comment: *

Name: *

Email: *

Verification: *

An organization is evaluating the use of Google Cloud Platform (GCP) for certain IT workloads. A well- established directory service is used to manage user identities and lifecycle management. This directory service must continue for the organization to use as the "source of truth" directory for identities.
Which solution meets the organization's requirements?

• A.Google Cloud Directory Sync (GCDS)
• B.Cloud Identity
• C.Security Assertion Markup Language (SAML)
• D.Pub/Sub

Comment: *

Name: *

Email: *

Verification: *

A customer wants to make it convenient for their mobile workforce to access a CRM web interface that is hosted on Google Cloud Platform (GCP). The CRM can only be accessed by someone on the corporate network. The customer wants to make it available over the internet. Your team requires an authentication layer in front of the application that supports two-factor authentication Which GCP product should the customer implement to meet these requirements?

• A.Cloud Endpoints
• B.Cloud VPN
• C.Cloud Identity-Aware Proxy
• D.Cloud Armor

Comment: *

Name: *

Email: *

Verification: *

You are responsible for protecting highly sensitive data in BigQuery. Your operations teams need access to this data, but given privacy regulations, you want to ensure that they cannot read the sensitive fields such as email addresses and first names. These specific sensitive fields should only be available on a need-to-know basis to the HR team. What should you do?

• A.Perform data masking with the DLP API and store that data in BigQuery for later use.
• B.Perform data redaction with the DLP API and store that data in BigQuery for later use.
• C.Perform data inspection with the DLP API and store that data in BigQuery for later use.
• D.Perform tokenization for Pseudonymization with the DLP API and store that data in BigQuery for later use.

Comment: *

Name: *

Email: *

Verification: *

A customer wants to grant access to their application running on Compute Engine to write only to a specific Cloud Storage bucket. How should you grant access?

• A.Create a service account for the application, and grant Cloud Storage Object Creator permissions to the project.
• B.Create a service account for the application, and grant Cloud Storage Object Creator permissions at the bucket level.
• C.Create a user account, authenticate with the application, and grant Google Storage Admin permissions at the bucket level.
• D.Create a user account, authenticate with the application, and grant Google Storage Admin permissions at the project leve

Comment: *

Name: *

Email: *

Verification: *