GOOGLE PROFESSIONAL SECURITY
ENGINEER COMPREHENSIVE TEST PAPER
2026 FULL SOLUTION STUDY GUIDE
● Which international compliance standard provides guidelines for
information security controls applicable to the provision and use of
cloud services?
A. ISO 27001
B. ISO 27002
C. ISO 27017
D. ISO 27018. Answer: C. ISO 27017
● You will create a new Service Account that should be able to list the
Compute Engine instances in the project. You want to follow Google-
recommended practices.What should you do?
A. Create an Instance Template, and allow the Service Account Read
Only access for the Compute Engine Access Scope.
B. Create a custom role with the permission compute.instances.list and
grant the Service Account this role.
C. Give the Service Account the role of Compute Viewer, and use the
new Service Account for all instances.
D. Give the Service Account the role of Project Viewer, and use the new
Service Account for all instances.. Answer: B. Create a custom role with
, the permission compute.instances.list and grant the Service Account this
role. Most Voted
● In a shared security responsibility model for IaaS, which two layers of
the stack does the customer share responsibility for? (Choose two.)
A. Hardware
B. Network Security
C. Storage Encryption
D. Access Policies
E. Boot. Answer: B. Network Security
D. Access Policies
● An organization is starting to move its infrastructure from its on-
premises environment to Google Cloud Platform (GCP). The first step
the organization wants to take is to migrate its ongoing data backup and
disaster recovery solutions to GCP. The organization's on-premises
production environment is going to be the next phase for migration to
GCP. Stable networking connectivity between the on-premises
environment and GCP is also being implemented.Which GCP solution
should the organization use?
A. BigQuery using a data pipeline job with continuous updates via
Cloud VPN
B. Cloud Storage using a scheduled task and gsutil via Cloud
Interconnect
ENGINEER COMPREHENSIVE TEST PAPER
2026 FULL SOLUTION STUDY GUIDE
● Which international compliance standard provides guidelines for
information security controls applicable to the provision and use of
cloud services?
A. ISO 27001
B. ISO 27002
C. ISO 27017
D. ISO 27018. Answer: C. ISO 27017
● You will create a new Service Account that should be able to list the
Compute Engine instances in the project. You want to follow Google-
recommended practices.What should you do?
A. Create an Instance Template, and allow the Service Account Read
Only access for the Compute Engine Access Scope.
B. Create a custom role with the permission compute.instances.list and
grant the Service Account this role.
C. Give the Service Account the role of Compute Viewer, and use the
new Service Account for all instances.
D. Give the Service Account the role of Project Viewer, and use the new
Service Account for all instances.. Answer: B. Create a custom role with
, the permission compute.instances.list and grant the Service Account this
role. Most Voted
● In a shared security responsibility model for IaaS, which two layers of
the stack does the customer share responsibility for? (Choose two.)
A. Hardware
B. Network Security
C. Storage Encryption
D. Access Policies
E. Boot. Answer: B. Network Security
D. Access Policies
● An organization is starting to move its infrastructure from its on-
premises environment to Google Cloud Platform (GCP). The first step
the organization wants to take is to migrate its ongoing data backup and
disaster recovery solutions to GCP. The organization's on-premises
production environment is going to be the next phase for migration to
GCP. Stable networking connectivity between the on-premises
environment and GCP is also being implemented.Which GCP solution
should the organization use?
A. BigQuery using a data pipeline job with continuous updates via
Cloud VPN
B. Cloud Storage using a scheduled task and gsutil via Cloud
Interconnect
