Google Exam Professional Cloud Security Engineer Topic 1 Question 101 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam

Question #: 101
Topic #: 1

[All Professional Cloud Security Engineer Questions]

You are on your company's development team. You noticed that your web application hosted in staging on GKE dynamically includes user data in web pages without first properly validating the inputted dat

a. This could allow an attacker to execute gibberish commands and display arbitrary content in a victim user's browser in a production environment.

How should you prevent and fix this vulnerability?

AUse Cloud IAP based on IP address or end-user device attributes to prevent and fix the vulnerability.

BSet up an HTTPS load balancer, and then use Cloud Armor for the production environment to prevent the potential XSS attack.

CUse Web Security Scanner to validate the usage of an outdated library in the code, and then use a secured version of the included library.

DUse Web Security Scanner in staging to simulate an XSS injection attack, and then use a templating system that supports contextual auto-escaping.

Show Suggested Answer

Suggested Answer: D

There is mention about simulating in Web Security Scanner. 'Web Security Scanner cross-site scripting (XSS) injection testing *simulates* an injection attack by inserting a benign test string into user-editable fields and then performing various user actions.' https://cloud.google.com/security-command-center/docs/how-to-remediate-web-security-scanner-findings#xss

by Avery at Apr 05, 2025, 10:45 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tonja

2 days ago

Definitely go with option D! Simulating the attack in the staging environment is the best way to identify and fix the vulnerability before it reaches production.

upvoted 0 times

...

Abel

14 days ago

I agree with Suzi, Cloud IAP based on IP address or end-user device attributes can help prevent attacks.

upvoted 0 times

...

Suzi

18 days ago

I think we should use Cloud IAP to prevent the vulnerability.

upvoted 0 times

...