GCP - Professional Cloud Security Engineer Practice Questions & Free Practice Exam
5 free GCP - Professional Cloud Security Engineer practice questions below, with instant explanations. The full simulator contains hundreds of exam-style questions across every topic.
On-call engineers need `roles/cloudsql.editor` only when an incident is open. Each grant must require approval from a second human, must revoke automatically after at most two hours, and must leave no standing permission afterward. Which control meets all three requirements?
Question 2
Routine project IAM administration on a Google Cloud organization should NOT use which principal?
Question 3
An engineer runs a fleet of healthcare imaging Compute Engine VMs without external IP addresses in one region. The VMs must initiate outbound connections to a public container registry for image pulls, but no URL filtering or TLS inspection is required, and all inbound paths from the internet must stay closed. Which Google Cloud service satisfies the requirement with the smallest configuration footprint?
Question 4
Which property of a Secret Manager secret is permanent and cannot be changed after the secret is created?
Question 5
On a GKE Standard cluster, which party operates the Kubernetes control plane components such as the API server, scheduler, and etcd?
Ready for the full GCP - Professional Cloud Security Engineer exam simulator?
Unlock the complete question bank, weighted mock exams, saved-question flashcards, and the Shark AI tutor - all inside your MyCertStack account.
