Google Professional-Cloud-Security-Engineer Dumps Questions Answers

You are working with a client who plans to migrate their data to Google Cloud. You are responsible for recommending an encryption service to manage their encrypted keys. You have the following requirements:

• The master key must be rotated at least once every 45 days.
• The solution that stores the master key must be FIPS 140-2 Level 3 validated.
• The master key must be stored in multiple regions within the US for redundancy.

Which solution meets these requirements?

You are a security administrator at your company. Per Google-recommended best practices, you implemented the domain restricted sharing organization policy to allow only required domains to access your projects. An engineering team is now reporting that users at an external partner outside your organization domain cannot be granted access to the resources in a project. How should you make an exception for your partner's domain while following the stated best practices?

Your company’s cloud security policy dictates that VM instances should not have an external IP address. You need to identify the Google Cloud service that will allow VM instances without external IP addresses to connect to the internet to update the VMs. Which service should you use?