MENU
An organization's security and risk management teams are concerned about where their responsibility lies for certain production workloads they are running in Google Cloud Platform (GCP), and where Google's responsibility lies. They are mostly running workloads using Google Cloud's Platform-as-a-Service (PaaS) offerings, including App Engine primarily.
Which one of these areas in the technology stack would they need to focus on as their primary responsibility when using App Engine?
Suggested Answer: B
Get Premium Professional Cloud Security Engineer Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
30 comments · newest first
KI
Kimberely
11 months ago
Surprised that people think they need to handle XSS and SQLi on PaaS!
MA
Madalyn
11 months ago
A is crucial for monitoring, but B is where the focus should be.
RE
Rebecka
11 months ago
Wait, isn't managing the Guest OS more on Google? That's C, right?
ER
Eric
11 months ago
I think D is also super important for data security.
AL
Alexia
12 months ago
Definitely B, gotta defend against those attacks!
SH
Shad
12 months ago
Encrypting stored data seems important, but I wonder if that's more on Google’s side since they handle a lot of the infrastructure.
HY
Hyun
1 year ago
I feel like managing updates for the Guest OS isn't our responsibility with App Engine since it's a fully managed service, but I could be wrong.
JE
Jettie
1 year ago
I think we had a practice question about securing web applications, and defending against XSS and SQLi attacks was highlighted as a key responsibility.
LO
Lorenza
1 year ago
I remember we discussed shared responsibility in cloud environments, but I'm not entirely sure which specific areas fall under our control with PaaS.
LU
Lucy
1 year ago
I'm pretty confident that the answer is B. When using a PaaS like App Engine, the organization is responsible for securing their application code and defending against common web application vulnerabilities.
CH
Chantell
1 year ago
Okay, I've got this. When using App Engine, the organization's primary responsibility is to defend against XSS and SQLi attacks. The cloud provider handles the underlying infrastructure and OS updates.
PA
Paulene
1 year ago
Hmm, I'm a bit confused about the shared responsibility model here. I'll need to review my notes on the differences between IaaS, PaaS, and SaaS to determine where the organization's primary responsibility lies.
KA
Karan
1 year ago
This seems like a straightforward question about the shared responsibility model in cloud computing. I'll need to think about which areas the organization is responsible for when using App Engine.
DE
Denise
1 year ago
Ha, this question is a real mind-bender. I bet the answer is something totally unexpected, like 'Remembering to put the server on the cloud before launching it.'
LA
Laura
1 year ago
I don't know, I'm kind of leaning towards B. Defending against XSS and SQLi attacks seems like a crucial part of our security posture when using a PaaS like App Engine.
EL
Elden
1 year ago
Jacob: True, that's also crucial. Maybe we need to focus on both B and C for a well-rounded security approach.
JA
Jacob
1 year ago
User 2: I agree, security is key. But what about C? Managing updates and patches is important too.
MA
Marylou
1 year ago
User 1: I think B is a good choice. We need to protect against those attacks.
JO
Joanna
1 year ago
Hmm, I'm pretty sure the answer is C. Managing the latest updates and security patches for the Guest OS has to be our responsibility, not Google's.
EL
Elinore
1 year ago
Wow, this question is really testing our understanding of cloud security responsibilities. I'm going to have to think carefully about this one.
ME
Merlyn
1 year ago
D) Encrypting all stored data
BE
Becky
1 year ago
C) Manage the latest updates and security patches for the Guest OS
HE
Helaine
1 year ago
C) Manage the latest updates and security patches for the Guest OS
LA
Lashawn
1 year ago
B) Defending against XSS and SQLi attacks
RE
Renea
1 year ago
A) Configuring and monitoring VPC Flow Logs
FE
Felice
1 year ago
B) Defending against XSS and SQLi attacks
JU
Jules
1 year ago
A) Configuring and monitoring VPC Flow Logs
BE
Bernardo
2 years ago
I believe encrypting all stored data is also important to consider for security.
AL
Allene
2 years ago
I agree with Vanesa. Keeping the Guest OS updated is crucial for security.
VA
Vanesa
2 years ago
I think we should focus on managing the latest updates and security patches for the Guest OS.