Google Cloud Developer Secure Application Services Quiz

1. Which tool helps you scan container images for vulnerabilities?

Cloud Build

Container Analysis API

Artifact Registry

Cloud Trace

2. What does HTTPS encryption protect against during data transmission?

Man-in-the-middle attacks

SQL injection

Cross-site scripting

Buffer overflow

3. Which service allows you to securely connect on-premises networks to GCP?

VPC Peering

Cloud VPN

Cloud CDN

Load Balancer

4. What is the purpose of Cloud Audit Logs?

Monitor application performance

Record and track administrative and data access

Manage user passwords

Optimize database queries

5. Which principle states that users should have the minimum permissions needed?

Defense in depth

Principle of least privilege

Zero trust

Separation of duties

6. What does Secret Manager do in Google Cloud?

Stores and manages sensitive data like API keys

Manages user sessions

Monitors network traffic

Compresses application logs

7. Which authentication method uses JSON Web Tokens (JWT) for stateless authentication?

Session-based authentication

Bearer token authentication

Basic authentication

Digest authentication

8. What is the main benefit of using Cloud Armor?

Protects against DDoS and application-level attacks

Manages SSH keys

Encrypts backups

Monitors database performance

9. Which service provides a managed relational database with built-in security?

Cloud Firestore

Cloud SQL

Cloud Bigtable

Cloud Datastore

10. What does OAuth 2.0 primarily enable in application authentication?

Delegated access without sharing passwords

Symmetric encryption

Network traffic filtering

Database transaction management

11. Which Google Cloud service allows you to run containerized applications without managing servers?

Cloud Run

Compute Engine

App Engine Standard

Cloud Functions

12. What is the purpose of Application Default Credentials (ADC)?

Set default password policies

Automatically discover and use credentials from the environment

Encrypt all application data

Limit API requests per user

13. Which feature allows you to define which traffic can access your Cloud Run service?

Firewall rules

Cloud Armor

VPC connectors

Load balancers

14. What does VPC stand for in Google Cloud?

Virtual Private Cloud

Virtual Protocol Connection

Verified Public Certificate

Virtualized Processing Core

15. Which IAM role allows full control of all GCP resources?

Editor

Viewer

Owner

Contributor

16. What is a service account in Google Cloud?

An account for human users only

A special account for applications and services to authenticate

A billing account

A project management tool

17. Which service is best for running stateless, event-driven workloads that scale automatically?

Cloud Functions

Compute Engine

Cloud SQL

Firestore

18. What does Cloud KMS primarily provide?

Key management and encryption

Network security groups

API rate limiting

Application logging

19. Which encryption method protects data in transit between client and Cloud Run services?

TLS/SSL

AES-256

RSA-2048

HMAC-SHA256

20. What is the primary purpose of Cloud IAM in securing GCP resources?

Manage network traffic

Control user access and permissions

Encrypt data at rest