Google Exam Professional Cloud Security Engineer Topic 4 Question 85 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam

Question #: 85
Topic #: 4

[All Professional Cloud Security Engineer Questions]

You have the following resource hierarchy. There is an organization policy at each node in the hierarchy as shown. Which load balancer types are denied in VPC A?

AAll load balancer types are denied in accordance with the global node's policy.

BINTERNAL_TCP_UDP, INTERNAL_HTTP_HTTPS is denied in accordance with the folder's policy.

CEXTERNAL_TCP_PROXY, EXTERNAL_SSL_PROXY are denied in accordance with the project's policy.

DEXTERNAL_TCP_PROXY, EXTERNAL_SSL_PROXY, INTERNAL_TCP_UDP, and INTERNAL_HTTP_HTTPS are denied in accordance with the folder and project's policies.

Show Suggested Answer

Suggested Answer: C, D

https://cloud.google.com/confidential-computing/confidential-vm/docs/creating-cvm-instance#considerations

Confidential VM does not support live migration. You can only enable Confidential Computing on a VM when you first create the instance. https://cloud.google.com/confidential-computing/confidential-vm/docs/creating-cvm-instance

by Delila at Aug 07, 2024, 02:39 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Fletcher

5 days ago

I'm going with C. The project policy denies EXTERNAL_TCP_PROXY and EXTERNAL_SSL_PROXY, so those are the load balancer types that are denied in VPC A.

upvoted 0 times

...

Justa

13 days ago

But what about INTERNAL_TCP_UDP and INTERNAL_HTTP_HTTPS? Are they also denied?

upvoted 0 times

...

Valentin

14 days ago

I agree with Jolanda. The project's policy specifically denies those types.

upvoted 0 times

...

I'm not sure about this one. Let me think it through... Ah, I think B is the right answer. The folder policy denies INTERNAL_TCP_UDP and INTERNAL_HTTP_HTTPS, so those are the load balancer types that are denied in VPC A.

upvoted 0 times

...

Alesia

18 days ago

Hmm, I think the correct answer is D. The folder and project policies both deny some types of load balancers, so the final set of denied load balancers would be EXTERNAL_TCP_PROXY, EXTERNAL_SSL_PROXY, INTERNAL_TCP_UDP, and INTERNAL_HTTP_HTTPS.

upvoted 0 times

...

Jolanda

20 days ago

I think the denied load balancer types in VPC A are EXTERNAL_TCP_PROXY and EXTERNAL_SSL_PROXY.

upvoted 0 times

...

Google Exam Professional Cloud Security Engineer Topic 4 Question 85 Discussion

Contribute your Thoughts:

Fletcher

Justa

Valentin

Vincenza

Alesia

Jolanda