Google Exam Professional Cloud Security Engineer Topic 4 Question 85 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam

Question #: 85
Topic #: 4

[All Professional Cloud Security Engineer Questions]

You have the following resource hierarchy. There is an organization policy at each node in the hierarchy as shown. Which load balancer types are denied in VPC A?

AAll load balancer types are denied in accordance with the global node's policy.

BINTERNAL_TCP_UDP, INTERNAL_HTTP_HTTPS is denied in accordance with the folder's policy.

CEXTERNAL_TCP_PROXY, EXTERNAL_SSL_PROXY are denied in accordance with the project's policy.

DEXTERNAL_TCP_PROXY, EXTERNAL_SSL_PROXY, INTERNAL_TCP_UDP, and INTERNAL_HTTP_HTTPS are denied in accordance with the folder and project's policies.

Show Suggested Answer

Suggested Answer: C, D

https://cloud.google.com/confidential-computing/confidential-vm/docs/creating-cvm-instance#considerations

Confidential VM does not support live migration. You can only enable Confidential Computing on a VM when you first create the instance. https://cloud.google.com/confidential-computing/confidential-vm/docs/creating-cvm-instance

by Delila at Aug 07, 2024, 02:39 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Davida

1 months ago

Hmm, this question is a real head-scratcher. I bet the answer is hidden in the hieroglyphics of the resource hierarchy! *chuckles*

upvoted 0 times

Maricela

19 days ago

I think the answer is D, because it mentions both folder and project policies.

upvoted 0 times

...

Yoko

2 months ago

This question is a real brain-teaser! I'm going to have to go with D. The folder and project policies combine to deny all the load balancer types listed.

upvoted 0 times

Jody

5 days ago

D is the best option here. The policies at both the folder and project levels restrict all the load balancer types mentioned.

upvoted 0 times

...

Gail

13 days ago

It's definitely a tricky question, but I also think D is the right choice. The combination of folder and project policies covers all the denied load balancer types.

upvoted 0 times

...

Carin

18 days ago

I agree, D is the correct answer. The policies at both the folder and project levels deny all the load balancer types.

upvoted 0 times

...

Fletcher

2 months ago

I'm going with C. The project policy denies EXTERNAL_TCP_PROXY and EXTERNAL_SSL_PROXY, so those are the load balancer types that are denied in VPC A.

upvoted 0 times

Gracie

5 days ago

Agreed. C is the right choice based on the project's policy for load balancer types in VPC A.

upvoted 0 times

...

Lorita

19 days ago

I think C is the correct answer too. The project's policy is the one that applies to VPC A in this case.

upvoted 0 times

...

Kerry

1 months ago

That makes sense. The project policy does specify those load balancer types to be denied.

upvoted 0 times

...

Barrett

1 months ago

I'm going with C. The project policy denies EXTERNAL_TCP_PROXY and EXTERNAL_SSL_PROXY, so those are the load balancer types that are denied in VPC A.

upvoted 0 times

...

Justa

2 months ago

But what about INTERNAL_TCP_UDP and INTERNAL_HTTP_HTTPS? Are they also denied?

upvoted 0 times

...

Valentin

2 months ago

I agree with Jolanda. The project's policy specifically denies those types.

upvoted 0 times

...

I'm not sure about this one. Let me think it through... Ah, I think B is the right answer. The folder policy denies INTERNAL_TCP_UDP and INTERNAL_HTTP_HTTPS, so those are the load balancer types that are denied in VPC A.

upvoted 0 times

Micah

26 days ago

Yes, B is the right choice. The folder's policy specifically denies INTERNAL_TCP_UDP and INTERNAL_HTTP_HTTPS in VPC A.

upvoted 0 times

...

Darrel

1 months ago

I agree, B is the correct answer. The folder policy dictates which load balancer types are denied in VPC A.

upvoted 0 times

...

Alesia

2 months ago

Hmm, I think the correct answer is D. The folder and project policies both deny some types of load balancers, so the final set of denied load balancers would be EXTERNAL_TCP_PROXY, EXTERNAL_SSL_PROXY, INTERNAL_TCP_UDP, and INTERNAL_HTTP_HTTPS.

upvoted 0 times

Jani

21 days ago

Definitely, understanding the organization policy at each node is crucial for making the right decision.

upvoted 0 times

...

Tina

1 months ago

That makes sense, it's important to consider all levels of the hierarchy when determining the denied load balancer types.

upvoted 0 times

...

Johna

1 months ago

So, the correct answer would be D, which includes all the denied load balancer types from both policies.

upvoted 0 times

...

Olga

2 months ago

I agree, the folder and project policies both contribute to the denied load balancer types.

upvoted 0 times

...

Jolanda

2 months ago

I think the denied load balancer types in VPC A are EXTERNAL_TCP_PROXY and EXTERNAL_SSL_PROXY.

upvoted 0 times

...

Google Exam Professional Cloud Security Engineer Topic 4 Question 85 Discussion

Contribute your Thoughts:

Davida

Maricela

Yoko

Jody

Gail

Carin

Fletcher

Gracie

Lorita

Kerry

Barrett

Justa

Valentin

Vincenza

Micah

Darrel

Alesia

Jani

Tina

Johna

Olga

Jolanda