Google Cloud Security Compliance Management Quiz

1. Which log sink configuration allows you to retain logs for long-term compliance audits?

Send logs to Cloud Logging only

Archive logs to Cloud Storage with retention policies

Send logs to Cloud Pub/Sub

Store logs in Firestore

2. What is the significance of implementing least privilege access in a compliance program?

To simplify user management

To limit exposure to unauthorized data and reduce breach risk

To reduce operational costs

To speed up deployment processes

3. Which audit log type captures administrative changes and policy modifications for compliance?

Data access logs

Admin activity logs

System event logs

Application logs

4. What is the primary purpose of network segmentation in compliance frameworks?

To improve internet speed

To isolate sensitive systems and limit lateral movement

To reduce cloud costs

To enable faster data transfer

5. Which GCP service provides real-time threat detection and security findings for compliance monitoring?

Cloud Armor

Security Command Center

Cloud Intrusion Detection

Threat Analytics Engine

6. What is the role of Key Management Service (KMS) in a compliance strategy?

To manage user login credentials

To centrally manage encryption keys with audit trails

To optimize network routing

To monitor application performance

7. Which Google Cloud feature enables you to monitor and restrict API usage for compliance purposes?

Cloud Monitoring

API quotas and policies

Cloud Load Balancing

Cloud CDN

8. What does GDPR require organizations to implement regarding customer data access?

No access restrictions needed

Right to access, deletion, and data portability

Access only through administrators

Data must be shared with regulators

9. Which compliance standard specifically addresses payment card data security requirements?

GDPR

PCI-DSS

FISMA

NIST

10. What is the primary benefit of using Google Cloud's Data Loss Prevention (DLP) API for compliance?

To improve application performance

To identify and protect sensitive data automatically

To manage user passwords

To optimize storage usage

11. Which Google Cloud service provides automated compliance monitoring and reporting across your entire GCP infrastructure?

Cloud Audit Logs

Cloud Security Command Center

Cloud Compliance Dashboard

Cloud Policy Enforcer

12. What is the purpose of Binary Authorization in a compliance and security context?

To encrypt binary data

To ensure only approved container images are deployed

To manage user binary permissions

To compress deployment files

13. Which Google Cloud resource requires the most stringent access controls for compliance purposes?

Public buckets

Sensitive data repositories and encryption keys

Compute instances

Load balancers

14. What is the key difference between SOC 2 Type I and Type II certifications?

Type I covers security, Type II covers compliance

Type I is a point-in-time audit, Type II evaluates controls over a period

Type I is for cloud providers, Type II is for customers

Type I requires encryption, Type II does not

15. Which feature allows you to define and enforce organization policies across all GCP resources?

Security Policy

Organizational Policy

Resource Policy

Access Policy

16. What is the purpose of implementing encryption at rest for Cloud Storage buckets in a compliance context?

To improve query performance

To protect data from unauthorized access if infrastructure is compromised

To reduce storage costs

To enable faster data retrieval

17. Which IAM role provides the minimum permissions needed for a security auditor to view logs without making changes?

Viewer

Logs Viewer

Security Admin

Editor

18. What does Cloud Audit Logs record about user and system activity in GCP?

Only successful API calls

All API calls, resource changes, and authentication events

Only failed transactions

Only data access patterns

19. Which compliance framework is most commonly required for healthcare organizations using Google Cloud?

PCI-DSS

HIPAA

SOC 2 Type I

ISO 27001

20. What is the primary purpose of implementing VPC Service Controls in a compliance strategy?

To encrypt data at rest

To create security perimeters around sensitive services

To manage user authentication

To optimize network performance

Google Cloud Security Engineer Compliance Management Quiz