Google Professional Cloud Security Engineer Question 384
Select 3Google Cloud PlatformYour organization is deploying a new application on Google Cloud and wants to ensure that security is automated across both the infrastructure and the application lifecycle. Which of the following actions should you take to meet this requirement?
- A
Use IaC (Infrastructure as Code) tools like Terraform or Deployment Manager to configure security settings for resources such as firewalls and IAM roles.
- B
Manually configure security settings on all cloud resources to ensure full control over the deployment.
- C
Implement security scanning tools in your CI/CD pipeline to identify vulnerabilities in application code and dependencies.
- D
Enable Google Cloud Security Command Center (SCC) to monitor and respond to security threats in real time.
- E
Rely on default settings provided by Google Cloud, as they are sufficient for most security requirements.
Show answer and explanation
Correct answers: A, C, D
Explanation
To automate infrastructure and application security, it is essential to use tools and practices that ensure consistency, scalability, and early detection of vulnerabilities. IaC tools allow security configurations to be defined programmatically, while security scanning in CI/CD pipelines identifies issues during development. Google Cloud Security Command Center enhances security posture by providing automated threat detection and response capabilities. Manual configurations and default settings do not align with automation best practices and can leave the infrastructure vulnerable.
- A. Correct.
Using IaC tools like Terraform or Deployment Manager allows you to define security settings (e.g., IAM roles, firewalls) in a repeatable and automated way, ensuring consistency and reducing human error.
- B. Incorrect.
Manually configuring security settings is prone to errors, time-consuming, and not scalable, making it unsuitable for automating security.
- C. Correct.
Integrating security scanning tools in the CI/CD pipeline ensures that vulnerabilities in code and dependencies are identified early in the development lifecycle, automating application security.
- D. Correct.
Enabling Google Cloud Security Command Center (SCC) provides centralized monitoring and threat detection, supporting automated responses to security risks.
- E. Incorrect.
Relying on default settings is insufficient because they may not meet the specific security requirements of an organization or application.