A company migrated their entire data/center to Google Cloud Platform. It is running thousands of instances across multiple projects managed by different departments. You want to have a historical record of what was running in Google Cloud Platform at any point in time.
What should you do?

• A.Use Stackdriver to create a dashboard across all projects.
• B.Use Resource Manager on the organization level.
• C.Use Security Command Center to view all assets across the organization.
• D.Use Forseti Security to automate inventory snapshots.

Comment: *

Name: *

Email: *

Verification: *

You are a member of the security team at an organization. Your team has a single GCP project with credit card payment processing systems alongside web applications and data processing systems. You want to reduce the scope of systems subject to PCI audit standards.
What should you do?

• A.Use multi-factor authentication for admin access to the web application.
• B.Use only applications certified compliant with PA-DSS.
• C.Move the cardholder data environment into a separate GCP project.
• D.Use VPN for all connections between your office and cloud environments.

Comment: *

Name: *

Email: *

Verification: *

In a shared security responsibility model for IaaS, which two layers of the stack does the customer share responsibility for? (Choose two.)

• A.Network Security
• B.Boot
• C.Hardware
• D.Storage Encryption
• E.Access Policies

Comment: *

Name: *

Email: *

Verification: *

Which type of load balancer should you use to maintain client IP by default while using the standard network tier?

• A.SSL Proxy
• B.TCP Proxy
• C.Internal TCP/UDP
• D.TCP/UDP Network

Comment: *

Name: *

Email: *

Verification: *

You are the security admin of your company. You have 3,000 objects in your Cloud Storage bucket. You do not want to manage access to each object individually. You also do not want the uploader of an object to always have full control of the object. However, you want to use Cloud Audit Logs to manage access to your bucket.
What should you do?

• A.Set up an ACL with READER permission to a scope of allUsers.
• B.Set up a default bucket ACL and manage access for users using IAM.
• C.Set up an ACL with OWNER permission to a scope of allUsers.
• D.Set up Uniform bucket-level access on the Cloud Storage bucket and manage access for users using IAM.

Comment: *

Name: *

Email: *

Verification: *