Security Practice Questions
Encryption, secrets, perimeters and detection. 6 original questions with full explanations.
Question 1 of 6
0 answered · 6 remaining
Securitymedium
Where should an application's database password be stored?
Select an answer to see the explanation.
These questions are written by GCP Prep to test understanding of publicly documented concepts. They are not real exam questions.
What this test covers
One concept per question. If you can explain each of these without hesitating, you are in good shape on Security.
- Secrets belong in a dedicated service with access control, versioning and audit
- Service perimeters address exfiltration by an authorised identity
- Data residency needs both correct placement and a preventative guardrail
- Controlling the key is what enables cryptographic revocation of access
- Detecting anomalous behaviour requires analysing activity logs, not configuration
- Most detection failures are data problems, not rule problems
Other topics
Related Certifications
- Professional Cloud Security EngineerIdentity, boundaries, data protection and compliance.
- Professional Cloud DeveloperFor engineers who build and ship cloud-native applications.
- Professional Cloud Network EngineerThe deepest networking exam. Specialist, and valued for it.
- Professional Cloud ArchitectThe flagship design exam. Long scenarios, real trade-offs.
Related Cloud Topics
- Encryption and Key ManagementDefault encryption, customer-managed keys, rotation and secret handling — and the operational consequences of each choice.
- Identity and Access Management (IAM)Who can do what to which resource: members, roles, policy inheritance, service accounts and least privilege.
- Security Posture and Threat DetectionFinding misconfigurations, detecting threats, understanding audit logs and running a detection and response capability.