Exam Professional Cloud Security Engineer topic 1 question 35 discussion

Actual exam question from Google's Professional Cloud Security Engineer

Question #: 35
Topic #: 1

[All Professional Cloud Security Engineer Questions]

You are a member of the security team at an organization. Your team has a single GCP project with credit card payment processing systems alongside web applications and data processing systems. You want to reduce the scope of systems subject to PCI audit standards.
What should you do?

A. Use multi-factor authentication for admin access to the web application.
B. Use only applications certified compliant with PA-DSS.
C. Move the cardholder data environment into a separate GCP project.
D. Use VPN for all connections between your office and cloud environments.

Show Suggested Answer

Suggested Answer: C 🗳️

by jonclem at March 26, 2020, 5:05 p.m.

Comments

Submit Cancel

jonclem

Highly Voted 3 years, 2 months ago

I'd go for answer C myself. https://cloud.google.com/solutions/best-practices-vpc-design

upvoted 22 times

...

[Removed]

Highly Voted 2 years, 7 months ago

Ans - C https://cloud.google.com/solutions/pci-dss-compliance-in-gcp#setting_up_your_payment-processing_environment

upvoted 7 times

...

AzureDP900

Most Recent 7 months, 2 weeks ago

answer is C

upvoted 1 times

...

Medofree

1 year, 2 months ago

Selected Answer: C

Projets are units of isolationm the answer is C.

upvoted 2 times

...

CHECK666

2 years, 8 months ago

C is the answer.

upvoted 1 times

...

smart123

3 years ago

The Answer is C. Check "Setting up your payment-processing environment" section in https://cloud.google.com/solutions/pci-dss-compliance-in-gcp. In the question, it is mentioned that it is the same environment for card processing as the Web App and Data processing and that is not recommended.

upvoted 4 times

...

xhova

3 years, 2 months ago

Definitely C

upvoted 1 times

...