Exam Professional Cloud Security Engineer topic 1 question 26 discussion

Actual exam question from Google's Professional Cloud Security Engineer

Question #: 26
Topic #: 1

[All Professional Cloud Security Engineer Questions]

An organization is migrating from their current on-premises productivity software systems to G Suite. Some network security controls were in place that were mandated by a regulatory body in their region for their previous on-premises system. The organization's risk team wants to ensure that network security controls are maintained and effective in G Suite. A security architect supporting this migration has been asked to ensure that network security controls are in place as part of the new shared responsibility model between the organization and Google Cloud.
What solution would help meet the requirements?

A. Ensure that firewall rules are in place to meet the required controls.
B. Set up Cloud Armor to ensure that network security controls can be managed for G Suite.
C. Network security is a built-in solution and Google's Cloud responsibility for SaaS products like G Suite.
D. Set up an array of Virtual Private Cloud (VPC) networks to control network security as mandated by the relevant regulation.

Show Suggested Answer

Suggested Answer: C 🗳️

by skshak at Sept. 25, 2020, 10:48 a.m.

Comments

Submit Cancel

ESP_SAP

Highly Voted 4 years ago

Correct Answer is (C): GSuite is Saas application. Shared responsibility “Security of the Cloud” - GCP is responsible for protecting the infrastructure that runs all of the services offered in the GCP Cloud. This infrastructure is composed of the hardware, software, networking, and facilities that run GCP Cloud services.

upvoted 11 times

AzureDP900

2 years, 1 month ago

C is right

upvoted 2 times

...

Topsy

Highly Voted 3 years, 12 months ago

Answer is C- Review this Youtube Video- https://www.youtube.com/watch?v=D2zf0SgNdUw, scroll to 7:55, it would show you the Shared Responsibility model- With Gsuite being a SaaS product, Network Security is handled by Google

upvoted 7 times

...

okhascorpio

Most Recent 10 months ago

This thread suggests option "D" to be the only viable option. Now what ?? https://www.exam-answer.com/migrating-to-gsuite-network-security-controls

upvoted 1 times

...

[Removed]

1 year, 4 months ago

Selected Answer: C

GSuite AKA Workspace is software as a service where the SAAS provider (Google) is responsible for all underlying security. https://youtu.be/D2zf0SgNdUw?t=535

upvoted 2 times

...

ppandey96

1 year, 8 months ago

Selected Answer: C

https://www.checkpoint.com/cyber-hub/cloud-security/what-is-google-cloud-platform-gcp-security/top-7-google-cloud-platform-gcp-security-best-practices/

upvoted 1 times

...