nerdexam
Google

PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #298

Your organization is preparing to build business services in Google Cloud for the first time. You must determine where to apply appropriate controls or policies. You must also identify what aspects…

The correct answer is D. Study the shared responsibilities model. Depending on your business scenario, you might need to. To understand where to apply controls and what Google manages in a first-time Google Cloud deployment, study the shared responsibilities model, which defines the division of security responsibilities between Google and the customer.

Submitted by miguelv· Apr 18, 2026Ensuring compliance

Question

Your organization is preparing to build business services in Google Cloud for the first time. You must determine where to apply appropriate controls or policies. You must also identify what aspects of your cloud deployment are managed by Google. What should you do?

Options

  • AModel your deployment on the Google Enterprise foundations blueprint. Follow the blueprint
  • BUse the Risk Manager tool in the Risk Protection Program to generate a report on your cloud
  • CSubscribe to the Google Cloud release notes to keep up on product updates and when new
  • DStudy the shared responsibilities model. Depending on your business scenario, you might need to

How the community answered

(28 responses)
  • A
    4% (1)
  • B
    4% (1)
  • C
    7% (2)
  • D
    86% (24)

Why each option

To understand where to apply controls and what Google manages in a first-time Google Cloud deployment, study the shared responsibilities model, which defines the division of security responsibilities between Google and the customer.

AModel your deployment on the Google Enterprise foundations blueprint. Follow the blueprint

While helpful for deployment guidance, an enterprise foundations blueprint outlines how to build, but not fundamentally who is responsible for which security aspects.

BUse the Risk Manager tool in the Risk Protection Program to generate a report on your cloud

The Risk Manager tool assesses risks in an existing cloud deployment, it does not explain the foundational shared responsibility model or the initial division of management.

CSubscribe to the Google Cloud release notes to keep up on product updates and when new

Subscribing to release notes keeps you updated on product features, but it does not explain the fundamental division of responsibilities between Google and the customer.

DStudy the shared responsibilities model. Depending on your business scenario, you might need toCorrect

The shared responsibilities model explicitly defines what Google is responsible for (security of the cloud) and what the customer is responsible for (security in the cloud), which is essential for determining where to apply customer-managed controls and what aspects Google manages.

Concept tested: Cloud shared responsibility model

Source: https://cloud.google.com/security/docs/shared-responsibility

Topics

#Shared Responsibility Model#Cloud Security Fundamentals#Cloud Governance#Security Controls

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice