GCP Professional Cloud Security Engineer Practice Question
A healthcare startup is preparing a HIPAA compliance assessment for an application that runs entirely in App Engine standard environment. The security lead must document which operational tasks remain under the company's control versus Google's in the PaaS model. Which task is the company still responsible for performing on Google Cloud?
Remediating zero-day vulnerabilities in the hypervisor layer that underpins App Engine
Granting IAM roles that allow the application to access Cloud Firestore and Cloud Storage
Maintaining physical security controls for the Google data centers where the application runs
Applying security patches to the operating system that hosts the App Engine runtime
In Google's PaaS offerings such as App Engine, Google manages the underlying infrastructure, including hypervisor, physical hardware, networking, and the guest operating system-so tasks like OS patching or hypervisor vulnerability mitigation are handled by Google. Physical data-center security is also Google's duty. Customers, however, remain responsible for configuring and enforcing access to their workloads. Granting or revoking IAM roles that let the application interact with other Google Cloud services is therefore a customer obligation, making that the correct choice. The remaining options describe responsibilities that fall to Google in the shared-responsibility model for App Engine.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is HIPAA compliance in Google Cloud?
Open an interactive chat with Bash
What is IAM in Google Cloud?
Open an interactive chat with Bash
What does Google's shared-responsibility model mean?
Open an interactive chat with Bash
What is the shared-responsibility model in Google Cloud?
Open an interactive chat with Bash
What is Identity and Access Management (IAM) in the context of Google Cloud?
Open an interactive chat with Bash
Why isn't patching the operating system needed in Google App Engine standard environment?
Open an interactive chat with Bash
GCP Professional Cloud Security Engineer
Supporting compliance requirements
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .