exam questions

Exam Professional Cloud Security Engineer All Questions

View all questions & answers for the Professional Cloud Security Engineer exam

Exam Professional Cloud Security Engineer topic 1 question 181 discussion

Actual exam question from Google's Professional Cloud Security Engineer
Question #: 181
Topic #: 1
[All Professional Cloud Security Engineer Questions]

Your organization operates Virtual Machines (VMs) with only private IPs in the Virtual Private Cloud (VPC) with internet access through Cloud NAT. Everyday, you must patch all VMs with critical OS updates and provide summary reports.

What should you do?

  • A. Validate that the egress firewall rules allow any outgoing traffic. Log in to each VM and execute OS specific update commands. Configure the Cloud Scheduler job to update with critical patches daily for daily updates.
  • B. Copy the latest patches to the Cloud Storage bucket. Log in to each VM, download the patches from the bucket, and install them.
  • C. Assign public IPs to VMs. Validate that the egress firewall rules allow any outgoing traffic. Log in to each VM, and configure a daily cron job to enable for OS updates at night during low activity periods.
  • D. Ensure that VM Manager is installed and running on the VMs. In the OS patch management service, configure the patch jobs to update with critical patches dally.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
i_am_robot
10 months, 3 weeks ago
Selected Answer: D
The best option would be D. Ensure that VM Manager is installed and running on the VMs. In the OS patch management service, configure the patch jobs to update with critical patches daily. This approach allows you to automate the process of patching your VMs with critical OS updates. VM Manager is a suite of tools that offers patch management, configuration management, and inventory management for VM instances. By using VM Manager’s OS patch management service, you can ensure that your VMs are always up-to-date with the latest patches.
upvoted 1 times
...
Xoxoo
1 year, 1 month ago
Selected Answer: D
VM Manager is a suite of tools that can be used to manage operating systems for large virtual machine (VM) fleets running Windows and Linux on Compute Engine. It helps drive efficiency through automation and reduces the operational burden of maintaining these VM fleets. VM Manager includes several services such as OS patch management, OS inventory management, and OS configuration management. By using VM Manager, you can apply patches, collect operating system information, and install, remove, or auto-update software packages. The suite provides a high level of control and automation for managing large VM fleets on Google Cloud.
upvoted 1 times
...
cyberpunk21
1 year, 2 months ago
Selected Answer: D
D is correct using VM manager we can patch all the VM's
upvoted 2 times
...
pfilourenco
1 year, 3 months ago
Selected Answer: D
D is the correct
upvoted 2 times
...
Sanjana2020
1 year, 3 months ago
A- validate egress firewall rules
upvoted 1 times
...
a190d62
1 year, 3 months ago
Selected Answer: D
VM manager is a suite of tools used to automate managing of the fleet of VMs (including OS patching) https://cloud.google.com/compute/docs/vm-manager
upvoted 3 times
...
K1SMM
1 year, 3 months ago
D vm doesn’t need ip public on cloud nat
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago