Professional Cloud Architect · Free Practice Question Medium
Question 2
For this question, refer to the Mountkirk Games case study. https://services.google.com/fh/files/blogs/master_case_study_mountkirk_games.pdf
Mountkirk Games wants to ensure their new gaming platform adheres to Google best practices for security and operational monitoring. They aim to reduce security risks while ensuring their operations teams can monitor and maintain platform health effectively. What actions should you take? (Choose two)
-
A
Ensure all API traffic is logged and monitored using Cloud Audit Logs.
-
B
Disable workload identity to minimize configuration overhead.
-
C
Configure BigQuery datasets to allow public access for faster query execution.
-
D
Use Cloud Identity and Access Management (IAM) to enforce least privilege for service accounts.
-
E
Use public GKE clusters to simplify workload accessibility.
Reveal correct answers
Correct answers: A, D
A.
Cloud Audit Logs provide visibility into API activities across the platform, ensuring that unauthorized or suspicious API calls can be detected and audited. This aligns with best practices for operational and security monitoring.
B.
Disabling workload identity sacrifices security for convenience. Workload identity is critical for securing interactions between Google Cloud services and should be enabled.
C.
Allowing public access to BigQuery datasets introduces significant security risks, violating Google’s best practices for data security. Proper access control and IAM policies should be used instead.
D.
Enforcing least privilege through IAM minimizes the risk of unauthorized access. Configuring service accounts with the least privilege ensures that applications and users only have the access they need, reducing the attack surface.
E.
Using public GKE clusters increases the risk of unauthorized access and attacks. Best practices recommend private GKE clusters with limited access.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
