Google Cloud Security Architecture Quiz

1. How can you restrict data access based on geographic location in GCP?

Using Cloud VPN only

VPC Service Controls with access levels

Modifying IAM policies

Enabling Cloud Armor

2. What is the main advantage of implementing resource hierarchies in GCP IAM?

Simplified billing only

Efficient permission inheritance and centralized policy management

Faster API response times

Reduced storage costs

3. How does Cloud Security Command Center help in security monitoring?

It backs up all cloud data

It provides centralized visibility and management of security risks

It automatically patches vulnerabilities

It encrypts all network traffic

4. What is the benefit of using Shielded VMs in GCP security architecture?

Increased storage capacity

Protection against rootkits with secure boot and integrity monitoring

Reduced network latency

Simplified identity management

5. Which compliance framework does GCP support for regulated industries?

Only SOC 2

HIPAA, PCI-DSS, SOC 2, ISO 27001, and others

Only ISO 27001

Only GDPR

6. What is the primary function of Workload Identity Federation?

Load balancing across multiple regions

Allowing external workloads to authenticate without long-lived credentials

Encrypting inter-service communication

Managing resource quotas

7. How does service account key rotation improve security?

It reduces computational overhead

It limits the window of exposure if keys are compromised

It increases authentication speed

It simplifies permission management

8. What role does Cloud Data Loss Prevention (DLP) play in security architecture?

Manages encryption keys

Detects and redacts sensitive data patterns

Monitors network traffic

Authenticates users

9. Which encryption approach ensures data remains encrypted even when accessed by authorized users?

Application-layer encryption

Transport layer security

End-to-end encryption with client-side key management

Database-level encryption

10. What is the purpose of implementing network segmentation using VPCs?

To increase bandwidth capacity

To isolate workloads and reduce blast radius

To reduce latency between services

To simplify firewall rule management

11. Which Google Cloud service provides centralized identity and access management across your organization?

Cloud Identity

Cloud KMS

VPC Service Controls

Cloud Armor

12. Which IAM role type grants permissions without conditions?

Conditional role

Predefined role

Custom role

Service role

13. What does the concept of 'defense in depth' mean in cloud security architecture?

Using a single strong security control

Implementing multiple layers of security controls

Focusing only on network-level protection

Relying solely on encryption

14. Which service provides audit logging and monitoring of API calls and resource changes?

Cloud Monitoring

Cloud Audit Logs

Cloud Trace

Cloud Profiler

15. What is the primary benefit of using Confidential Computing on GCP?

Reduced latency for data processing

Protection of data in use through hardware-based encryption

Automatic backup of sensitive data

Cost reduction for compute resources

16. How does Binary Authorization enhance container security in GCP?

It encrypts container images in transit

It ensures only verified container images can be deployed

It monitors container CPU usage

It manages container networking

17. Which feature of Cloud Armor protects applications from DDoS and web-based attacks?

Cloud VPN tunneling

Adaptive protection with ML-based detection

Data loss prevention scanning

Firewall rule auditing

18. What does the principle of least privilege require in IAM role assignment?

Grant all roles to administrators

Grant only the minimum permissions needed for a task

Use only predefined roles

Assign roles at the organization level

19. Which encryption method is used by Cloud KMS for protecting customer-managed encryption keys?

Envelope encryption with Google-managed keys

Symmetric AES encryption only

RSA public-key cryptography exclusively

Single-layer AES-128 encryption

20. What is the primary purpose of implementing VPC Service Controls in GCP?

Encrypt data at rest

Create security perimeters around sensitive services

Manage user authentication

Monitor network traffic

Google Cloud Architect Security Architecture Quiz