Professional Cloud Security EngineerDemo

By Google · Question Mode

QuestionQ222

Securing communications and establishing boundary protection

An organization’s security and risk-management teams are concerned about the boundaries between their responsibilities and Google’s responsibilities for certain production workloads running in Google Cloud. They mostly run workloads with Google Cloud platform-as-a-Service (PaaS) offerings, primarily App Engine.

Which technology-stack area should be their primary responsibility when using App Engine?

  • A Configuring and monitoring VPC Flow Logs
  • B Defending against XSS and SQLi attacks
  • C Managing the latest updates and security patches for the Guest OS
  • D Encrypting all stored data
Explanation

App Engine is a PaaS service: Google manages more of the underlying platform, while the customer shares responsibility for application-level controls and remains responsible for client protection. Defending the application against cross-site scripting (XSS) and SQL injection (SQLi) is therefore a customer responsibility.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!