Google Professional Cloud Security Engineer Question 418
Select 3Google Cloud PlatformYour organization is implementing a security strategy using Google Cloud. The security team wants to monitor and analyze traffic patterns, detect potential intrusions, and ensure compliance with regulations. Which combination of Google Cloud services should you configure to meet these requirements?
- A
Enable VPC Flow Logs to collect and analyze network traffic metadata.
- B
Deploy Cloud IDS to detect and alert on potential threats in the network.
- C
Configure Packet Mirroring to mirror all traffic from your VPC to an external analytics tool.
- D
Use Cloud Next Generation Firewall (Cloud NGFW) to block unauthorized access and log denied traffic.
- E
Enable Cloud DNS Logging to analyze DNS queries for malicious activity.
Show answer and explanation
Correct answers: A, B, D
Explanation
To monitor and analyze traffic patterns, detect potential threats, and ensure compliance, enabling VPC Flow Logs, deploying Cloud IDS, and using Cloud NGFW together provide a comprehensive solution. VPC Flow Logs offer visibility into traffic metadata, Cloud IDS provides intrusion detection, and Cloud NGFW enforces security policies while logging relevant data. Packet Mirroring and Cloud DNS Logging are useful in specific use cases but are not directly required for this scenario.
- A. Correct.
VPC Flow Logs are essential for capturing and analyzing metadata about network traffic, which helps in understanding traffic patterns and identifying anomalies.
- B. Correct.
Cloud IDS is specifically designed to detect and alert on potential intrusions, making it a critical component of a security strategy.
- C. Incorrect.
Packet Mirroring is useful for traffic analysis but is not directly necessary for this scenario as it mirrors packets for external tools rather than directly detecting or logging anomalies.
- D. Correct.
Cloud NGFW is a managed firewall solution that can block unauthorized access and log denied traffic, complementing the detection and analysis capabilities.
- E. Incorrect.
While Cloud DNS Logging helps analyze DNS queries, it is not directly relevant for monitoring traffic patterns or detecting intrusions in this specific scenario.