Which encryption algorithm is used with Default Encryption in Cloud Storage?

• A.AES-256
• B.SHA512
• C.MD5
• D.3DES

Comment: *

Name: *

Email: *

Verification: *

A security team at an e-commerce company wants to define an automatic incident response process for fraudulent credit card usage attempts. The team targets a 10-minute or faster response time for such incidents. The fraudulent card list is updated every 60 seconds. The e- commerce servers log the transaction details in near-real time. Which option should you recommend to the security team?

• A.Define a log-based metric for each fraudulent credit card, and set a Stackdriver alert for these metrics.
• B.Maintain a log ingestion exclusion filter based on the fraudulent credit card lists.
• C.Use AutoML to automatically build models based on the fraudulent credit card lists.
• D.Create a new logging export with a filter to match the transaction and a sink pointing to a Cloud Pub/Sub topic.

Comment: *

Name: *

Email: *

Verification: *

What are the steps to encrypt data using envelope encryption?
A.Generate a data encryption key (DEK) locally.
* Use a key encryption key (KEK) to wrap the DEK.
* Encrypt data with the KEK.
* Store the encrypted data and the wrapped KEK.
B.Generate a key encryption key (KEK) locally.
* Use the KEK to generate a data encryption key (DEK).
* Encrypt data with the DEK.
* Store the encrypted data and the wrapped DEK.
C.Generate a data encryption key (DEK) locally.
* Encrypt data with the DEK.
* Use a key encryption key (KEK) to wrap the DEK.
* Store the encrypted data and the wrapped DEK.
D.Generate a key encryption key (KEK) locally.
* Generate a data encryption key (DEK) locally.
* Encrypt data with the KEK.
* Store the encrypted data and the wrapped DEK.

Comment: *

Name: *

Email: *

Verification: *

Which two security characteristics are related to the use of VPC peering to connect two VPC networks? (Choose two.)

• A.Ability to share specific subnets across peered networks
• B.Ability to peer networks that belong to different Google Cloud Platform organizations
• C.Firewall rules that can be created with a tag from one peered network to another peered network
• D.Central management of routes, firewalls, and VPNs for peered networks
• E.Non-transitive peered networks; where only directly peered networks can communicate

Comment: *

Name: *

Email: *

Verification: *

In a shared security responsibility model for IaaS, which two layers of the stack does the customer share responsibility for? (Choose two.)

• A.Storage Encryption
• B.Network Security
• C.Access Policies
• D.Boot
• E.Hardware

Comment: *

Name: *

Email: *

Verification: *