Google Professional Cloud Security Engineer Exam - Topic 1 Question 98 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam

Question #: 98
Topic #: 1

[All Professional Cloud Security Engineer Questions]

An organization's security and risk management teams are concerned about where their responsibility lies for certain production workloads they are running in Google Cloud Platform (GCP), and where Google's responsibility lies. They are mostly running workloads using Google Cloud's Platform-as-a-Service (PaaS) offerings, including App Engine primarily.

Which one of these areas in the technology stack would they need to focus on as their primary responsibility when using App Engine?

AConfiguring and monitoring VPC Flow Logs

BDefending against XSS and SQLi attacks

CManage the latest updates and security patches for the Guest OS

DEncrypting all stored data

Show Suggested Answer

Suggested Answer: B

by Shawn at Feb 12, 2025, 06:47 AM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Kimberely

6 months ago

Surprised that people think they need to handle XSS and SQLi on PaaS!

upvoted 0 times

...

Madalyn

6 months ago

A is crucial for monitoring, but B is where the focus should be.

upvoted 0 times

...

Rebecka

6 months ago

Wait, isn't managing the Guest OS more on Google? That's C, right?

upvoted 0 times

...

Eric

7 months ago

I think D is also super important for data security.

upvoted 0 times

...

Alexia

7 months ago

Definitely B, gotta defend against those attacks!

upvoted 0 times

...

Shad

7 months ago

Encrypting stored data seems important, but I wonder if that's more on Google’s side since they handle a lot of the infrastructure.

upvoted 0 times

...

Hyun

7 months ago

I feel like managing updates for the Guest OS isn't our responsibility with App Engine since it's a fully managed service, but I could be wrong.

upvoted 0 times

...

Jettie

7 months ago

I think we had a practice question about securing web applications, and defending against XSS and SQLi attacks was highlighted as a key responsibility.

upvoted 0 times

...

Lorenza

8 months ago

I remember we discussed shared responsibility in cloud environments, but I'm not entirely sure which specific areas fall under our control with PaaS.

upvoted 0 times

...

Lucy

8 months ago

I'm pretty confident that the answer is B. When using a PaaS like App Engine, the organization is responsible for securing their application code and defending against common web application vulnerabilities.

upvoted 0 times

...

Chantell

8 months ago

Okay, I've got this. When using App Engine, the organization's primary responsibility is to defend against XSS and SQLi attacks. The cloud provider handles the underlying infrastructure and OS updates.

upvoted 0 times

...

Paulene

8 months ago

Hmm, I'm a bit confused about the shared responsibility model here. I'll need to review my notes on the differences between IaaS, PaaS, and SaaS to determine where the organization's primary responsibility lies.

upvoted 0 times

...

Karan

8 months ago

This seems like a straightforward question about the shared responsibility model in cloud computing. I'll need to think about which areas the organization is responsible for when using App Engine.

upvoted 0 times

...

Denise

1 year ago

Ha, this question is a real mind-bender. I bet the answer is something totally unexpected, like 'Remembering to put the server on the cloud before launching it.'

upvoted 0 times

...

Laura

1 year ago

I don't know, I'm kind of leaning towards B. Defending against XSS and SQLi attacks seems like a crucial part of our security posture when using a PaaS like App Engine.

upvoted 0 times