Cloud Data Protection Controls Quiz

1. Which GCP service provides real-time threat detection and response capabilities?

Cloud Armor

Security Command Center

Cloud Identity

Cloud Monitoring

2. What does CMEK rotation accomplish in Google Cloud?

It automatically re-encrypts all data with a new key

It improves network performance

It reduces storage costs

It simplifies user access management

3. Which tool helps identify and manage security vulnerabilities in GCP resources?

Cloud Monitoring

Cloud Logging

Security Command Center

Cloud Trace

4. What is the main advantage of using service accounts in GCP?

They replace human user authentication

They provide fine-grained access control for applications and services

They eliminate the need for encryption

They automatically backup data

5. Which GCP feature allows you to set up firewall rules for VPC networks?

Cloud KMS

VPC Firewall Rules

Cloud Load Balancer

Cloud NAT

6. What does Cloud Armor protect against?

Data encryption failures

DDoS attacks and web application attacks

Key management issues

IAM permission errors

7. Which service manages identity federation and single sign-on in Google Cloud?

Cloud IAM

Cloud Identity

Cloud Console

Cloud Endpoints

8. What is the purpose of Customer-Supplied Encryption Keys (CSEK)?

To allow customers to manage their own encryption keys

To reduce encryption overhead

To simplify key rotation

To enable automatic backups

9. Which compliance framework does Google Cloud support for HIPAA-regulated data?

SOC 1 only

PCI DSS only

HIPAA Business Associate Agreement (BAA)

GDPR only

10. What does the principle of least privilege mean in IAM?

Grant all permissions to administrators

Grant only the minimum permissions needed for a task

Deny all access by default

Use only one password for all accounts

11. Which encryption method in Google Cloud encrypts data at rest by default for all services?

Customer-Managed Encryption Keys (CMEK)

Google-Managed Encryption Keys (GMEK)

Application-Layer Encryption (ALE)

Hardware Security Module (HSM) encryption

12. What is the primary benefit of using Confidential Computing in GCP?

It reduces network latency

It encrypts data during processing in memory

It eliminates the need for key management

It automatically scales resources

13. Which encryption standard does Google Cloud use for data in transit?

AES-128

TLS 1.2 or higher

RSA-1024

DES-3

14. What does Cloud Audit Logs track in Google Cloud?

Network traffic patterns only

Administrative actions and data access events

Application performance metrics

User device locations

15. Which feature allows you to control where your data is stored geographically?

Cloud Firewall

Data residency and multi-region replication settings

Cloud CDN

VPC Flow Logs

16. What is the purpose of Binary Authorization in GCP?

To encrypt container images

To ensure only verified container images are deployed

To manage container registry access

To monitor container resource usage

17. Which IAM role provides the least privilege for reading Cloud Storage objects?

Roles/storage.admin

Roles/storage.objectViewer

Roles/storage.objectCreator

Roles/storage.legacyBucketReader

18. In Google Cloud, what does VPC Service Controls provide?

Encryption of data at rest

A security perimeter around GCP resources

User identity verification

Real-time threat detection

19. Which service allows you to manage cryptographic keys and control encryption in Google Cloud?

Cloud Identity and Access Management

Cloud Key Management Service (KMS)