Google Professional Cloud Security Engineer
Practice Test Exam
1. Which Google Cloud service is used to manage encryption
keys centrally?
A. Cloud IAM
B. Cloud KMS
C. Cloud Armor
D. Cloud DNS
Answer: B
Rationale: Cloud KMS is a centralized key management service
used to create, rotate, and manage cryptographic keys.
2. What is the primary purpose of Google Cloud IAM?
A. To monitor network traffic
B. To manage access control for cloud resources
C. To store encryption keys
D. To provide DNS resolution
Answer: B
,Rationale: IAM manages identities and their access to Google
Cloud resources through roles and policies.
3. Which Google Cloud service provides DDoS protection and
web application firewall?
A. Cloud Armor
B. Cloud KMS
C. Cloud IAM
D. Cloud DNS
Answer: A
Rationale: Cloud Armor provides DDoS protection and WAF
capabilities for applications behind load balancers.
4. What is the purpose of a service account in Google Cloud?
A. To authenticate human users
B. To allow applications to authenticate to Google Cloud APIs
C. To store passwords
D. To manage billing
Answer: B
,Rationale: Service accounts are used by applications and
workloads to authenticate to Google Cloud APIs.
5. Which Google Cloud service provides a hardware security
module for key management?
A. Cloud KMS
B. Cloud HSM
C. Cloud IAM
D. Cloud Armor
Answer: B
Rationale: Cloud HSM provides hardware-backed key
management for cryptographic operations.
6. What is the principle of least privilege in Google Cloud IAM?
A. Granting all permissions to all users
B. Granting only the permissions needed to perform a task
C. Granting permissions based on seniority
D. Granting permissions randomly
Answer: B
, Rationale: Least privilege means granting only the minimum
permissions required to perform a specific task.
7. Which Google Cloud service provides visibility into API
activity?
A. Cloud Audit Logs
B. Cloud KMS
C. Cloud Armor
D. Cloud DNS
Answer: A
Rationale: Cloud Audit Logs record API calls and administrative
activities in Google Cloud.
8. What is the purpose of VPC Service Controls?
A. To provide perimeter security for Google Cloud services
B. To store encryption keys
C. To manage DNS records
D. To provide load balancing
Answer: A
Practice Test Exam
1. Which Google Cloud service is used to manage encryption
keys centrally?
A. Cloud IAM
B. Cloud KMS
C. Cloud Armor
D. Cloud DNS
Answer: B
Rationale: Cloud KMS is a centralized key management service
used to create, rotate, and manage cryptographic keys.
2. What is the primary purpose of Google Cloud IAM?
A. To monitor network traffic
B. To manage access control for cloud resources
C. To store encryption keys
D. To provide DNS resolution
Answer: B
,Rationale: IAM manages identities and their access to Google
Cloud resources through roles and policies.
3. Which Google Cloud service provides DDoS protection and
web application firewall?
A. Cloud Armor
B. Cloud KMS
C. Cloud IAM
D. Cloud DNS
Answer: A
Rationale: Cloud Armor provides DDoS protection and WAF
capabilities for applications behind load balancers.
4. What is the purpose of a service account in Google Cloud?
A. To authenticate human users
B. To allow applications to authenticate to Google Cloud APIs
C. To store passwords
D. To manage billing
Answer: B
,Rationale: Service accounts are used by applications and
workloads to authenticate to Google Cloud APIs.
5. Which Google Cloud service provides a hardware security
module for key management?
A. Cloud KMS
B. Cloud HSM
C. Cloud IAM
D. Cloud Armor
Answer: B
Rationale: Cloud HSM provides hardware-backed key
management for cryptographic operations.
6. What is the principle of least privilege in Google Cloud IAM?
A. Granting all permissions to all users
B. Granting only the permissions needed to perform a task
C. Granting permissions based on seniority
D. Granting permissions randomly
Answer: B
, Rationale: Least privilege means granting only the minimum
permissions required to perform a specific task.
7. Which Google Cloud service provides visibility into API
activity?
A. Cloud Audit Logs
B. Cloud KMS
C. Cloud Armor
D. Cloud DNS
Answer: A
Rationale: Cloud Audit Logs record API calls and administrative
activities in Google Cloud.
8. What is the purpose of VPC Service Controls?
A. To provide perimeter security for Google Cloud services
B. To store encryption keys
C. To manage DNS records
D. To provide load balancing
Answer: A
