Google Cloud Digital Leader Certification Module 08

Your company security team manages access to control to production systems using an LDAP directory group. Hos is this access control managed in the Google Cloud production project?

• Assign the proper role to the Service Account in the projects IAM Policy

• Assign the proper role to the Google Group in the projects IAM Policy

• Create the project in a folder with the same name as the LDAP directory group

• Grant each user the roles/iam.serviceAccountUser role on a service account that exists in the Google Group

Why is data stored in Google Cloud secure and private?

• Data is encrypted by default

• Data is encrypted by Cloud Data Loss Prevention

• Data is encrypted when appropriate tag is applied

• Data is encrypted by the Security Command Center

Several departments in an organization are working together on a project. The organization wants to customize access to resources for each department. What is the quickest and most efficient way to achieve this?

• By assigning IAM primitive roles to each employee

• By applying least-privilege to roles for each employee

• By creating a single shared service account for all departments

• By mapping IAM roles to job functions for each department

An organization is moving away from an on-premises infrastructure. Instead, they want to create, access, and share information virtually in the cloud. What should the organization consider?

• Optimizing cost-management with a capital expenditure model

• Built-in security when moving their data to the cloud

• Optimizing cost-management with a capital expenditure model

• Increased hardware capacity when moving their data to the cloud

Which cybersecurity threat can lead to information being stolen or damaged without a user ever being aware?

• SLA policy violation

• Malware attack

• Ransomware attack

• Incomplete data input

An organization suffers a major data leak only six months after upgrading its security system. What should the organization do to ensure long-term security?

• Extend data retention policy lengths to at least seven years

• Pay more to get the best security system available on the market

• Wait for a more advanced security system to be released

• Hire cybersecurity experts to further develop their data security plan

How should a multinational organization that is migrating to Google Cloud consider security and privacy regulations to ensure that it is in compliance with global standards?

• Comply with international standards for data security and privacy, because they supersede all regional regulations

• Comply with regional data security regulations, because they're more complex than privacy standards

• Comply with data security and privacy regulations in each geographical region

• Comply with regional standards for data security and privacy, because they supersede all international regulations

A new team member has joined your project. You need to grant him permission to access a few Google Cloud resources through IAM. How can you grant permission to your new team member so that he can access the required Google Cloud resources.

• Grant role to the team member to access the resources as required

• Directly grant the permission to access the resources as required

• Grant IAM policy to the team member to access the resources as required

• Give pre-authenticated URLS so that the new team member can access the required resources.

How does a least privilege resources access model contribute to cloud security?

• Only maangers and other senior employees have cloud resource access

• Employees may only access on-premises software with special permission

• Employees only have access to the cloud resources necessary for their job

• Google is responsible for determining access to cloud resources.

A cloud-native organization is not meeting their service level objective (SLO) but has not exhausted their error budget. What should the organization prioritize?

• Stability to avoid prolonged user downtime

• Speed to release new features

• Innovation to improve user experience

• Hardware reliability to improve availability