You need to audit the network segmentation for your Google Cloud footprint. You currently operate Production and Non-Production infrastructure-as-a-service (IaaS) environments. All your VM instances are deployed without any service account customization.After observing the traffic in your custom network, you notice that all instances can communicate freely -- despite tag-based VPC firewall rules in place to segment traffic properly -- with a priority of 1000. What are the most likely reasons for this behavior?

All VM instances are missing the respective network tags.

A VPC firewall rule is allowing traffic between source/targets based on the same service account with priority 999.

All VM instances are missing the respective network tags.

All VM instances are residing in the same network subnet.

All VM instances are configured with the same network route.

A VPC firewall rule is allowing traffic between source/targets based on the same service account with priority 999.

A VPC firewall rule is allowing traffic between source/targets based on the same service account with priority 1001.

You are creating a new infrastructure CI/CD pipeline to deploy hundreds of ephemeral projects in your Google Cloud organization to enable your users to interact with Google Cloud. You want to restrict the use of the default networks in your organization while following Google-recommended best practices. What should you do?

Enable the constraints/compute.skipDefaultNetworkCreation organization policy constraint at the organization level.

Create a cron job to trigger a daily Cloud Function to automatically delete all default networks for each project.

Grant your users the IAM Owner role at the organization level. Create a VPC Service Controls perimeter around the project that restricts the compute.googleapis.com API.

Only allow your users to use your CI/CD pipeline with a predefined set of infrastructure templates they can deploy to skip the creation of the default networks.

You are a security administrator at your company and are responsible for managing access controls (identification, authentication, and authorization) on Google Cloud. Which Google-recommended best practices should you follow when configuring authentication and authorization? (Choose two.)

Use SSO/SAML integration with Cloud Identity for user authentication and user lifecycle management.

Provide granular access with predefined roles.

Manually add users to Google Cloud.

Provision users with basic roles using Google's Identity and Access Management (IAM) service.

Use SSO/SAML integration with Cloud Identity for user authentication and user lifecycle management.

Provide granular access with predefined roles.

You have been tasked with inspecting IP packet data for invalid or malicious content. What should you do?

Use Packet Mirroring to mirror traffic to and from particular VM instances. Perform inspection using security software that analyzes the mirrored traffic.

Enable VPC Flow Logs for all subnets in the VPC. Perform inspection on the Flow Logs data using Cloud Logging.

Configure the Fluentd agent on each VM Instance within the VPC. Perform inspection on the log data using Cloud Logging.

Configure Google Cloud Armor access logs to perform inspection on the log data.

You have the following resource hierarchy. There is an organization policy at each node in the hierarchy as shown. Which load balancer types are denied in VPC A?

EXTERNAL_TCP_PROXY, EXTERNAL_SSL_PROXY, INTERNAL_TCP_UDP, and INTERNAL_HTTP_HTTPS are denied in accordance with the folder and project's policies.

All load balancer types are denied in accordance with the global node's policy.

INTERNAL_TCP_UDP, INTERNAL_HTTP_HTTPS is denied in accordance with the folder's policy.

EXTERNAL_TCP_PROXY, EXTERNAL_SSL_PROXY are denied in accordance with the project's policy.

EXTERNAL_TCP_PROXY, EXTERNAL_SSL_PROXY, INTERNAL_TCP_UDP, and INTERNAL_HTTP_HTTPS are denied in accordance with the folder and project's policies.

Your security team wants to implement a defense-in-depth approach to protect sensitive data stored in a Cloud Storage bucket. Your team has the following requirements:The Cloud Storage bucket in Project A can only be readable from Project B.The Cloud Storage bucket in Project A cannot be accessed from outside the network.Data in the Cloud Storage bucket cannot be copied to an external Cloud Storage bucket.What should the security team do?

Enable VPC Service Controls, create a perimeter around Projects A and B. and include the Cloud Storage API in the Service Perimeter configuration.

Enable domain restricted sharing in an organization policy, and enable uniform bucket-level access on the Cloud Storage bucket.

Enable VPC Service Controls, create a perimeter around Projects A and B. and include the Cloud Storage API in the Service Perimeter configuration.

Enable Private Access in both Project A and B's networks with strict firewall rules that allow communication between the networks.

Enable VPC Peering between Project A and B's networks with strict firewall rules that allow communication between the networks.

You need to create a VPC that enables your security team to control network resources such as firewall rules. How should you configure the network to allow for separation of duties for network resources?

Set up a Shared VPC where the security team manages the firewall rules, and share the network with developers via service projects.

Set up multiple VPC networks, and set up multi-NIC virtual appliances to connect the networks.

Set up VPC Network Peering, and allow developers to peer their network with a Shared VPC.

Set up a VPC in a project. Assign the Compute Network Admin role to the security team, and assign the Compute Admin role to the developers.

Set up a Shared VPC where the security team manages the firewall rules, and share the network with developers via service projects.

You are onboarding new users into Cloud Identity and discover that some users have created consumer user accounts using the corporate domain name. How should you manage these consumer user accounts with Cloud Identity?

Use the transfer tool for unmanaged user accounts.

Use Google Cloud Directory Sync to convert the unmanaged user accounts.

Create a new managed user account for each consumer user account.

Use the transfer tool for unmanaged user accounts.

Configure single sign-on using a customer's third-party provider.

You have created an OS image that is hardened per your organization's security standards and is being stored in a project managed by the security team. As a Google Cloud administrator, you need to make sure all VMs in your Google Cloud organization can only use that specific OS image while minimizing operational overhead. What should you do? (Choose two.)

Grant users the compuce.imageUser role in the OS image project.

Set up an image access organization policy constraint, and list the security team managed project in the projects allow list.

Grant users the compuce.imageUser role in their own projects.

Grant users the compuce.imageUser role in the OS image project.

Store the image in every project that is spun up in your organization.

Set up an image access organization policy constraint, and list the security team managed project in the projects allow list.

Remove VM instance creation permission from users of the projects, and only allow you and your team to create VM instances.

You're developing the incident response plan for your company. You need to define the access strategy that your DevOps team will use when reviewing and investigating a deployment issue in your Google Cloud environment. There are two main requirements:Least-privilege access must be enforced at all times.The DevOps team must be able to access the required resources only during the deployment issue.How should you grant access while following Google-recommended best practices?

Create a service account, and grant it limited list/view permissions. Give the Service Account User Role on this service account to the DevOps team.

Assign the Project Viewer Identity and Access Management (IAM) role to the DevOps team.

Create a custom IAM role with limited list/view permissions, and assign it to the DevOps team.

Create a service account, and grant it the Project Owner IAM role. Give the Service Account User Role on this service account to the DevOps team.

Create a service account, and grant it limited list/view permissions. Give the Service Account User Role on this service account to the DevOps team.

You are working with a client who plans to migrate their data to Google Cloud. You are responsible for recommending an encryption service to manage their encrypted keys. You have the following requirements:The master key must be rotated at least once every 45days.The solution that stores the master key must be FIPS 140-2 Level 3 validated.The master key must be stored in multiple regions within the US for redundancy.Which solution meets these requirements?

Customer-managed encryption keys with Cloud HSM

Customer-managed encryption keys with Cloud Key Management Service

Customer-managed encryption keys with Cloud HSM

Customer-supplied encryption keys

You are consulting with a client that requires end-to-end encryption of application data (including data in transit, data in use, and data at rest) within Google Cloud. Which options should you utilize to accomplish this? (Choose two.)

Confidential Computing and Istio

Customer-supplied encryption keys

Confidential Computing and Istio

You need to enforce a security policy in your Google Cloud organization that prevents users from exposing objects in their buckets externally. There are currently no buckets in your organization. Which solution should you implement proactively to achieve this goal with the least operational overhead?

Enable the constraints/storage.publicAccessPrevention constraint at the organization level.

Create an hourly cron job to run a Cloud Function that finds public buckets and makes them private.

Enable the constraints/storage.publicAccessPrevention constraint at the organization level.

Enable the constraints/storage.uniformBucketLevelAccess constraint at the organization level.

Create a VPC Service Controls perimeter that protects the storage.googleapis.com service in your projects that contains buckets. Add any new project that contains a bucket to the perimeter.

Your company requires the security and network engineering teams to identify all network anomalies and be able to capture payloads within VPCs. Which method should you use?

Configure packet mirroring policies.

Define an organization policy constraint.

Configure packet mirroring policies.

Enable VPC Flow Logs on the subnet.

Monitor and analyze Cloud Audit Logs.

Your company is moving to Google Cloud. You plan to sync your users first by using Google Cloud Directory Sync (GCDS). Some employees have already created Google Cloud accounts by using their company email addresses that were created outside of GCDS. You must create your users on Cloud Identity.What should you do?

Configure GCDS and use GCDS exclusion rules to ensure users are not suspended.

Configure GCDS and use GCDS search rules lo sync these users.

Use the transfer tool to migrate unmanaged users.

Write a custom script to identify existing Google Cloud users and call the Admin SDK Directory API to transfer their account.

Configure GCDS and use GCDS exclusion rules to ensure users are not suspended.

Your organization is using GitHub Actions as a continuous integration and delivery (Cl/CD) platform. You must enable access to Google Cloud resources from the Cl/CD pipelines in the most secure way.What should you do?

Configure workload identity federation to use GitHub as an identity pool provider.

Create a service account key and add it to the GitHub pipeline configuration file.

Create a service account key and add it to the GitHub repository content.

Configure a Google Kubernetes Engine cluster that uses Workload Identity to supply credentials to GitHub.

Configure workload identity federation to use GitHub as an identity pool provider.

Your company must follow industry specific regulations. Therefore, you need to enforce customer-managed encryption keys (CMEK) for all new Cloud Storage resources in the organization called org1.What command should you execute?

* organization policy: constraints/gcp.restrictStorageNonCraekServices * binding at: orgl * policy type: deny * policy value: storage.gcogleapis.com

* organization policy: constraints/gcp.restrictHonCmekServices * binding at: orgl * policy type: deny * policy value: storage.googleapis.com

* organization policy:constraints/gcp.restrictStorageNonCraekServices * binding at: orgl * policy type: allow * policy value: all supported services

* organization policy: constramts/gcp.restrictNonCmekServices * binding at: orgl * policy type: allow * policy value: storage.googleapis.com

Your Google Cloud organization allows for administrative capabilities to be distributed to each team through provision of a Google Cloud project with Owner role (roles/ owner). The organization contains thousands of Google Cloud Projects Security Command Center Premium has surfaced multiple cpen_myscl_port findings. You are enforcing the guardrails and need to prevent these types of common misconfigurations.What should you do?

Create a hierarchical firewall policy configured at the organization to deny all connections from 0 0 0 0/0.

Create a firewall rule for each virtual private cloud (VPC) to deny traffic from 0 0 0 0/0 with priority 0.

Create a hierarchical firewall policy configured at the organization to deny all connections from 0 0 0 0/0.

Create a Google Cloud Armor security policy to deny traffic from 0 0 0 0/0.

Create a hierarchical firewall policy configured at the organization to allow connections only from internal IP ranges

Your organization must comply with the regulation to keep instance logging data within Europe. Your workloads will be hosted in the Netherlands in region europe-west4 in a new project. You must configure Cloud Logging to keep your data in the country.What should you do?

Create a new tog bucket in europe-west4. and redirect the _Def auit bucKet to the new bucket.

Configure the organization policy constraint gcp.resourceLocations to europe-west4.

Set the logging storage region to eurcpe-west4 by using the gcloud CLI logging settings update.

Create a new tog bucket in europe-west4. and redirect the _Def auit bucKet to the new bucket.

Configure log sink to export all logs into a Cloud Storage bucket in europe-west4.

Your organization is rolling out a new continuous integration and delivery (CI/CD) process to deploy infrastructure and applications in Google Cloud Many teams will use their own instances of the CI/CD workflow It will run on Google Kubernetes Engine (GKE) The CI/CD pipelines must be designed to securely access Google Cloud APIsWhat should you do?

* 1 Create individual service accounts (or each deployment pipeline * 2 Add an identifier for the pipeline in the service account naming convention * 3 Ensure each pipeline runs on dedicated pods * 4 Use workload identity to map a deployment pipeline pod with a service account

* 1 Create a dedicated service account for the CI/CD pipelines * 2 Run the deployment pipelines in a dedicated nodes pool in the GKE cluster * 3 Use the service account that you created as identity for the nodes in the pool to authenticate to the Google Cloud APIs

* 1 Create service accounts for each deployment pipeline * 2 Generate private keys for the service accounts * 3 Securely store the private keys as Kubernetes secrets accessible only by the pods that run the specific deploy pipeline

* 1 Create individual service accounts (or each deployment pipeline * 2 Add an identifier for the pipeline in the service account naming convention * 3 Ensure each pipeline runs on dedicated pods * 4 Use workload identity to map a deployment pipeline pod with a service account

* 1 Create two service accounts one for the infrastructure and one for the application deployment * 2 Use workload identities to let the pods run the two pipelines and authenticate with the service accounts * 3 Run the infrastructure and application pipelines in separate namespaces

Your organization processes sensitive health information. You want to ensure that data is encrypted while in use by the virtual machines (VMs). You must create a policy that is enforced across the entire organization.What should you do?

Implement an organization policy that ensures that all VM resources created across your organization use customer-managed encryption keys (CMEK) protection.

Implement an organization policy that ensures all VM resources created across your organization are Confidential VM instances.

Implement an organization policy that ensures that all VM resources created across your organization use Cloud External Key Manager (EKM) protection.

No action is necessary because Google encrypts data while it is in use by default.

You are a Cloud Identity administrator for your organization. In your Google Cloud environment groups are used to manage user permissions. Each application team has a dedicated group Your team is responsible for creating these groups and the application teams can manage the team members on their own through the Google Cloud console. You must ensure that the application teams can only add users from within your organization to their groups.What should you do?

Set an Identity and Access Management (IAM) policy that includes a condition that restricts group membership to user principals that belong to your organization.

Change the configuration of the relevant groups in the Google Workspace Admin console to prevent external users from being added to the group.

Set an Identity and Access Management (IAM) policy that includes a condition that restricts group membership to user principals that belong to your organization.

Define an Identity and Access Management (IAM) deny policy that denies the assignment of principals that are outside your organization to the groups in scope.

Export the Cloud Identity logs to BigQuery Configure an alert for external members added to groups Have the alert trigger a Cloud Function instance that removes the external members from the group.

Your organization wants to be continuously evaluated against CIS Google Cloud Computing Foundations Benchmark v1 3 0 (CIS Google Cloud Foundation 1 3). Some of the controls are irrelevant to your organization and must be disregarded in evaluation. You need to create an automated system or process to ensure that only the relevant controls are evaluated.What should you do?

Activate Security Command Center (SCC) Premium Create a rule to mute the security findings in SCC so they are not evaluated.

Mark all security findings that are irrelevant with a tag and a value that indicates a security exception Select all marked findings and mute them on the console every time they appear Activate Security Command Center (SCC) Premium.

Activate Security Command Center (SCC) Premium Create a rule to mute the security findings in SCC so they are not evaluated.

Download all findings from Security Command Center (SCC) to a CSV file Mark the findings that are part of CIS Google Cloud Foundation 1 3 in the file Ignore the entries that are irrelevant and out of scope for the company.

Ask an external audit company to provide independent reports including needed CIS benchmarks. In the scope of the audit clarify that some of the controls are not needed and must be disregarded.

You are routing all your internet facing traffic from Google Cloud through your on-premises internet connection. You want to accomplish this goal securely and with the highest bandwidth possible.What should you do?

Configure Cloud Interconnect and route traffic through an on-premises firewall.

Create an HA VPN connection to Google Cloud Replace the default 0 0 0 0/0 route.

Create a routing VM in Compute Engine Configure the default route with the VM as the next hop.

Configure Cloud Interconnect with HA VPN Replace the default 0 0 0 0/0 route to an on-premises destination.

Configure Cloud Interconnect and route traffic through an on-premises firewall.

Your organization is transitioning to Google Cloud You want to ensure that only trusted container images are deployed on Google Kubernetes Engine (GKE) clusters in a project. The containers must be deployed from a centrally managed. Container Registry and signed by a trusted authority.What should you do?Choose 2 answers

Configure the Binary Authorization policy with respective attestations for the project.

Configure the trusted image organization policy constraint for the project.

Configure the Binary Authorization policy with respective attestations for the project.

Create a custom organization policy constraint to enforce Binary Authorization for Google Kubernetes Engine (GKE).

Enable Container Threat Detection in the Security Command Center (SCC) for the project.

Configure the trusted image organization policy constraint for the project.

Enable Pod Security standards and set them to Restricted.

Your organization uses Google Workspace Enterprise Edition tor authentication. You are concerned about employees leaving their laptops unattended for extended periods of time after authenticating into Google Cloud. You must prevent malicious people from using an employee's unattended laptop to modify their environment.What should you do?

Set the session length timeout for Google Cloud services to a shorter duration.

Create a policy that requires employees to not leave their sessions open for long durations.

Review and disable unnecessary Google Cloud APIs.

Require strong passwords and 2SV through a security token or Google authenticate.

Set the session length timeout for Google Cloud services to a shorter duration.

You are migrating an on-premises data warehouse to BigQuery Cloud SQL, and Cloud Storage. You need to configure security services in the data warehouse. Your company compliance policies mandate that the data warehouse must:* Protect data at rest with full lifecycle management on cryptographic keys* Implement a separate key management provider from data management* Provide visibility into all encryption key requestsWhat services should be included in the data warehouse implementation?Choose 2 answers

Customer-managed encryption keys

Customer-Supplied Encryption Keys

Access Transparency and Approval

You are auditing all your Google Cloud resources in the production project. You want to identity all principals who can change firewall rules.What should you do?

Use Policy Analyzer lo query the permissions compute, firewalls, create of compute, firewalls. Create of compute,firewalls.delete.

Reference the Security Health Analytics - Firewall Vulnerability Findings in the Security Command Center.

Use Policy Analyzer to query the permissions compute, firewalls, get of compute, firewalls, list.

Use Firewall Insights to understand your firewall rules usage patterns.

You manage one of your organization's Google Cloud projects (Project A). AVPC Service Control (SC) perimeter is blocking API access requests to this project including Pub/Sub. A resource running under a service account in another project (Project B) needs to collect messages from a Pub/Sub topic in your project Project B is not included in a VPC SC perimeter. You need to provide access from Project B to the Pub/Sub topic in Project A using the principle of leastPrivilege.What should you do?

Configure an ingress policy for the perimeter in Project A and allow access for the service account in Project B to collect messages.

Create an access level that allows a developer in Project B to subscribe to the Pub/Sub topic that is located in Project A.

Create a perimeter bridge between Project A and Project B to allow the required communication between both projects.

Remove the Pub/Sub API from the list of restricted services in the perimeter configuration for Project A.

You run applications on Cloud Run. You already enabled container analysis for vulnerability scanning. However, you are concerned about the lack of control on the applications that are deployed. You must ensure that only trusted container images are deployed on Cloud Run.What should you do?Choose 2 answers

Set the organization policy constraint constraints/run. allowedBinaryAuthorizationPolicie to the list of allowed Binary Authorization policy names.

Enable Binary Authorization on the existing Cloud Run service.

Enable Binary Authorization on the existing Kubernetes cluster.

Set the organization policy constraint constraints/run. allowedBinaryAuthorizationPolicie to the list of allowed Binary Authorization policy names.

Set the organization policy constraint constraints/compute.trustedimageProjects to the list of protects that contain the trusted container images.

Enable Binary Authorization on the existing Cloud Run service.

Use Cloud Run breakglass to deploy an image that meets the Binary Authorization policy by default.

You have a highly sensitive BigQuery workload that contains personally identifiable information (Pll) that you want to ensure is not accessible from the internet. To prevent data exfiltration only requests from authorized IP addresses are allowed to query your BigQuery tables.What should you do?

Use service perimeter and create an access level based on the authorized source IP address as the condition.

Use Google Cloud Armor security policies defining an allowlist of authorized IP addresses at the global HTTPS load balancer.

Use the Restrict allowed Google Cloud APIs and services organization policy constraint along with Cloud Data Loss Prevention (DLP).

Use the Restrict Resource service usage organization policy constraint along with Cloud Data Loss Prevention (DLP).

Your organization is moving virtual machines (VMs) to Google Cloud. You must ensure that operating system images that are used across your projects are trusted and meet your security requirements.What should you do?

Automate a security scanner that verifies that no common vulnerabilities and exposures (CVEs) are present in your trusted image repository.

Implement an organization policy to enforce that boot disks can only be created from images that come from the trusted image project.

Create a Cloud Function that is automatically triggered when a new virtual machine is created from the trusted image repository Verify that the image is not deprecated.

Implement an organization policy constraint that enables the Shielded VM service on all projects to enforce the trusted image repository usage.

Automate a security scanner that verifies that no common vulnerabilities and exposures (CVEs) are present in your trusted image repository.

You define central security controls in your Google Cloud environment for one of the folders in your organization you set an organizational policy to deny the assignment of external IP addresses to VMs. Two days later you receive an alert about a new VM with an external IP address under that folder.What could have caused this alert?

The VM was created with a static external IP address that was reserved in the project before the organizational policy rule was set.

The organizational policy constraint wasn't properly enforced and is running in 'dry run mode.

At project level, the organizational policy control has been overwritten with an 'allow' value.

The policy constraint on the folder level does not have any effect because of an allow' value for that constraint on the organizational level.

You are using Security Command Center (SCC) to protect your workloads and receive alerts for suspected security breaches at your company. You need to detect cryptocurrency mining software.Which SCC service should you use?

Virtual Machine Threat Detection

Your DevOps team uses Packer to build Compute Engine images by using this process:1 Create an ephemeral Compute Engine VM.2 Copy a binary from a Cloud Storage bucket to the VM's file system.3 Update the VM's package manager.4 Install external packages from the internet onto the VM.Your security team just enabled the organizational policy. consrraints/compure.vnExtemallpAccess. to restrict the usage of public IP Addresses on VMs. In response your DevOps team updated their scripts to remove public IP addresses on the Compute Engine VMs however the build pipeline is failing due to connectivity issues.What should you do?Choose 2 answers

Provision a Cloud NAT instance in the same VPC and region as the Compute Engine VM

Enable Private Google Access on the subnet that the Compute Engine VM is deployed within.

Provision a Cloud NAT instance in the same VPC and region as the Compute Engine VM

Provision an HTTP load balancer with the VM in an unmanaged instance group to allow inbound connections from the internet to your VM.

Update the VPC routes to allow traffic to and from the internet.

Provision a Cloud VPN tunnel in the same VPC and region as the Compute Engine VM.

Enable Private Google Access on the subnet that the Compute Engine VM is deployed within.

Your company recently published a security policy to minimize the usage of service account keys. On-premises Windows-based applications are interacting with Google Cloud APIs. You need to implement Workload Identity Federation (WIF) with your identity provider on-premises.What should you do?

Set up a workload identity pool with your corporate Active Directory Federation Service (ADFS) Configure a rule to let principals in the pool impersonate the Google Cloud service account.

Set up a workload identity pool with your corporate Active Directory Federation Service (ADFS) Let all principals in the pool impersonate the Google Cloud service account.

Set up a workload identity pool with an OpenID Connect (OIDC) service on the name machine Configure a rule to let principals in the pool impersonate the Google Cloud service account.

Set up a workload identity pool with an OpenID Connect (OIDC) service on the same machine Let all principals in the pool impersonate the Google Cloud service account.

You have stored company approved compute images in a single Google Cloud project that is used as an image repository. This project is protected with VPC Service Controls and exists in the perimeter along with other projects in your organization. This lets other projects deploy images from the image repository project. A team requires deploying a third-party disk image that is stored in an external Google Cloud organization. You need to grant read access to the disk image so that it can be deployed into the perimeter.What should you do?

* 1 Update the perimeter * 2 Configure the egressTo field to set identity Type to any_identity. * 3 Configure the egressFrom field to include the external Google Cloud project number as an allowed resource and the serviceName to compute. googleapis. com.

* Allow the external project by using the organizational policy constraints/compute.trustedlmageProjects.

* 1 Update the perimeter * 2 Configure the egressTo field to include the external Google Cloud project number as an allowed resource and the serviceName to compute. googleapis. com. * 3 Configure the egressFrom field to set identity Type to any_idestity.

* 1 Update the perimeter * 2 Configure the ingressFrcm field to set identityType to an-y_identity. * 3 Configure the ingressTo field to include the external Google Cloud project number as an allowed resource and the serviceName to compute.googleapis -com.

Google Professional Cloud Security Engineer Practice Test 5

You are implementing data protection by design and in accordance with GDPR requirements. As part of design reviews, you are told that you need to manage the encryption key for a solution that includes workloads for Compute Engine, Google Kubernetes Engine, Cloud Storage, BigQuery, and Pub/Sub. Which option should you choose for this implementation?

Become a Premium Member for full access

Unlock Premium Member

Google Professional Cloud Security Engineer Practice Test 5

Question

Google Professional Cloud Security Engineer Practice Tests

Practice Tests