Google Exam Professional Cloud Security Engineer Topic 1 Question 91 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam

Question #: 91
Topic #: 1

[All Professional Cloud Security Engineer Questions]

Your customer has an on-premises Public Key Infrastructure (PKI) with a certificate authority (CA). You need to issue certificates for many HTTP load balancer frontends. The on-premises PKI should be minimally affected due to many manual processes, and the solution needs to scale.

What should you do?

AUse Certificate Manager to issue Google managed public certificates and configure it at HTTP the load balancers in your infrastructure as code (laC).

BUse Certificate Manager to import certificates issued from on-premises PKI and for the frontends. Leverage the gcloud tool for importing

CUse a subordinate CA in the Google Certificate Authority Service from the on-premises PKI system to issue certificates for the load balancers.

DUse the web applications with PKCS12 certificates issued from subordinate CA based on OpenSSL on-premises Use the gcloud tool for importing. Use the External TCP/UDP Network load balancer instead of an external HTTP Load Balancer.

Show Suggested Answer

Suggested Answer: C

This approach allows you to leverage your existing on-premises PKI infrastructure while minimizing its impact and manual processes. By creating a subordinate CA in Google's Certificate Authority Service, you can automate the process of issuing certificates for your HTTP load balancer frontends. This solution scales well as the number of load balancers increases.

by Janae at Sep 17, 2024, 04:14 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Magnolia

2 months ago

Haha, Option D is like trying to reinvent the wheel with a square! Let's keep it simple and go with Option C. Google's got our backs on this one.

upvoted 0 times

Mariann

8 days ago

Good choice, Option C seems like the most straightforward solution for our on-premises PKI.

upvoted 0 times

...

Alesia

11 days ago

Yeah, let's not make things more difficult than they need to be. Option C it is.

upvoted 0 times

...

Layla

15 days ago

I agree, Google's tools are usually the way to go for these types of tasks.

upvoted 0 times

...

Buddy

23 days ago

Option D is definitely overcomplicating things. Let's stick with Option C and use the Google Certificate Authority Service.

upvoted 0 times

...

Leila

2 months ago

Whoa, Option D has some interesting ideas, but I'm not sure I'd want to deal with PKCS12 certificates and OpenSSL on-premises. Sounds like a lot of manual work to me.

upvoted 0 times

Dorothy

29 days ago

User 3: I think Option B could also work well. Importing certificates from the on-premises PKI using Certificate Manager and the gcloud tool seems like a good approach.

upvoted 0 times

...

Daniel

1 months ago

User 2: I agree with you, Daniel. Option A sounds like the most efficient solution for issuing certificates for the HTTP load balancer frontends.

upvoted 0 times

...

Lavonna

1 months ago

User 1: Option A seems like the best choice. Using Google managed public certificates and configuring it with infrastructure as code would minimize manual processes and scale easily.

upvoted 0 times

...

Gail

2 months ago

Hold up, folks! What about Option B? Importing the on-premises certificates into Certificate Manager could be a simpler solution. Gcloud is a powerful tool, after all.

upvoted 0 times

...

Cassie

2 months ago

I'm with Staci on this one. Option C is the clear winner. Using a subordinate CA is the perfect way to keep the on-premises PKI in the loop while scaling up the certificate management process.

upvoted 0 times

Celestina

28 days ago

It's important to maintain the connection to the on-premises PKI while ensuring scalability. Option C seems like the most efficient solution.

upvoted 0 times

...

Jesusita

1 months ago

I agree, using a subordinate CA from the on-premises PKI system is the best choice for issuing certificates.

upvoted 0 times

...

Colette

2 months ago

Option C is definitely the way to go. It keeps the on-premises PKI involved while scaling up.

upvoted 0 times

...

Crissy

2 months ago

I personally think option C is the way to go, using a subordinate CA in the Google Certificate Authority Service from our on-premises PKI system seems like a scalable solution.

upvoted 0 times

...

James

3 months ago

I disagree, I believe option B is more suitable as it allows us to import certificates from our on-premises PKI and use the gcloud tool for importing.

upvoted 0 times

...

Staci

3 months ago

Option C is the way to go! Leveraging the Google Certificate Authority Service to issue certificates for the load balancers is the most scalable and minimally intrusive solution.

upvoted 0 times

Malinda

2 months ago

I think using a subordinate CA in the Google Certificate Authority Service is the best option for issuing certificates for the HTTP load balancer frontends.

upvoted 0 times

...

Gearldine

2 months ago

Definitely, leveraging the Google Certificate Authority Service is the way to go for a scalable solution.

upvoted 0 times

...

Larae

2 months ago

It's definitely a smart choice to use the Google Certificate Authority Service for issuing certificates, it simplifies the process and ensures scalability.

upvoted 0 times

...

Julianna

2 months ago

I agree, it's the most efficient way to issue certificates for the load balancers without disrupting the on-premises PKI.

upvoted 0 times

...

Marylou

2 months ago

Option C is the best choice. Using a subordinate CA in the Google Certificate Authority Service will help scale the solution.

upvoted 0 times

...

Yasuko

2 months ago

I agree, using a subordinate CA in the Google Certificate Authority Service will help maintain the on-premises PKI system while scaling for the load balancers.

upvoted 0 times

...

German

2 months ago

Option C is the way to go! Leveraging the Google Certificate Authority Service to issue certificates for the load balancers is the most scalable and minimally intrusive solution.

upvoted 0 times

...

Glendora

3 months ago

I think option A is the best choice because it allows us to issue Google managed public certificates and configure them using infrastructure as code.

upvoted 0 times

...