GCP Professional Cloud Security Engineer Practice Question
Your team is designing a new card-processing microservice on Google Cloud. To minimize audit scope, security mandates that only Google-managed services already covered by Google Cloud's latest PCI DSS Level 1 attestation may be used. Which set of services meets this requirement while ensuring no component falls outside Google's attested service catalog?
Compute Engine for the microservice containers, Cloud SQL (PostgreSQL) for transactional data, Cloud Storage for object artifacts, and Pub/Sub for asynchronous messaging
App Engine Standard for the microservice, Firestore in Datastore mode for data, and Cloud IoT Core for device integration
GKE Autopilot for the microservice, Cloud Run for event handling, and Cloud Filestore for log storage
Cloud Functions for the microservice, Memorystore for session caching, and Cloud Filestore for shared persistence
Compute Engine, Cloud SQL (PostgreSQL), Cloud Storage, and Pub/Sub are all explicitly listed in Google Cloud's current PCI DSS Level 1 attestation. Using them keeps every layer of the stack inside Google's validated service boundary. In contrast, any architecture that includes Cloud Filestore or Cloud IoT Core would broaden the PCI scope because those services are not part of the attested catalog.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is PCI DSS Level 1 attestation?
Open an interactive chat with Bash
Why are Compute Engine, Cloud SQL, Cloud Storage, and Pub/Sub covered by PCI DSS in this solution but not Cloud Filestore or Cloud IoT Core?
Open an interactive chat with Bash
Why is minimizing audit scope important when designing PCI DSS-compliant systems?
Open an interactive chat with Bash
What is PCI DSS Level 1 attestation?
Open an interactive chat with Bash
Why does the answer prioritize Google Cloud services covered by PCI DSS Level 1 attestation?
Open an interactive chat with Bash
Why can't services like Cloud Filestore or Cloud IoT Core be used in this architecture?
Open an interactive chat with Bash
GCP Professional Cloud Security Engineer
Supporting compliance requirements
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .