Google Professional Cloud Security Engineer Question 421
Select 3Google Cloud PlatformYour organization recently deployed several critical applications in Google Cloud. To meet compliance requirements, the security team wants to monitor and analyze all network traffic within the VPC for potential anomalies. They also want to centralize log collection for in-depth analysis and query capabilities. Which combination of tools should you configure to meet these requirements?
- A
Enable VPC Flow Logs and export them to Cloud Logging for centralized log collection.
- B
Deploy Cloud IDS to detect and report potential threats in network traffic.
- C
Set up Packet Mirroring to capture and analyze full packet data.
- D
Use Cloud Armor to block unauthorized traffic at the edge of the network.
- E
Enable Cloud NGFW for advanced threat detection and centralized log analysis.
Show answer and explanation
Correct answers: A, B, C
Explanation
To meet the compliance requirements of monitoring and analyzing all network traffic within the VPC, you need to use tools that provide detailed insights into traffic flows and allow centralized log collection for further analysis. VPC Flow Logs, Cloud IDS, and Packet Mirroring are the appropriate tools for this purpose. Cloud Armor and Cloud NGFW, while useful in specific contexts, do not directly address the need for monitoring and analyzing internal VPC network traffic in the given scenario.
- A. Correct.
Correct. VPC Flow Logs provide detailed information about network traffic within a VPC, and exporting them to Cloud Logging enables centralized log collection for further analysis.
- B. Correct.
Correct. Cloud IDS is designed to detect threats in network traffic, which is essential for identifying anomalies within your VPC.
- C. Correct.
Correct. Packet Mirroring provides the ability to capture and analyze full packet data, which is useful for deep traffic inspection and compliance requirements.
- D. Incorrect.
Incorrect. While Cloud Armor provides protection at the edge of the network, it is not designed for monitoring or analyzing internal VPC network traffic.
- E. Incorrect.
Incorrect. Cloud NGFW is a managed firewall solution for advanced threat detection, but it is not primarily used for centralized log collection or compliance monitoring.