Google Professional Cloud Security Engineer Question 460
Select 3Google Cloud PlatformYour organization has recently enabled Security Command Center (SCC) on Google Cloud to improve its security posture. As a Professional Cloud Security Engineer, you are tasked with configuring SCC to monitor organization-wide threats and vulnerabilities. Which of the following steps should you take to ensure proper configuration and monitoring of SCC?
- A
Enable the desired security sources, such as Web Security Scanner and Event Threat Detection, in Security Command Center.
- B
Grant the 'roles/iam.securityReviewer' role to all users in the organization to allow them to access SCC findings.
- C
Configure notification channels in Cloud Monitoring to receive alerts for critical findings generated by SCC.
- D
Set up a Cloud Storage bucket to export SCC findings for long-term analysis.
- E
Manually remediate all vulnerabilities identified by SCC before enabling any additional security sources.
Show answer and explanation
Correct answers: A, C, D
Explanation
To properly configure and monitor Security Command Center (SCC), you need to enable relevant security sources, set up notification channels to stay informed about critical findings, and configure methods for long-term storage and analysis of findings. Granting overly broad permissions is a security risk, and vulnerability remediation is a continuous process that does not need to block enabling additional security sources. These actions collectively ensure effective use of SCC for threat detection and monitoring.
- A. Correct.
Correct: Enabling the appropriate security sources in SCC, such as Web Security Scanner or Event Threat Detection, allows SCC to detect and report on threats and vulnerabilities effectively.
- B. Incorrect.
Incorrect: Granting the 'roles/iam.securityReviewer' role to all users is not a security best practice. Access should be restricted to only those who need it, following the principle of least privilege.
- C. Correct.
Correct: Configuring notification channels in Cloud Monitoring ensures that critical findings from SCC are promptly communicated to relevant stakeholders.
- D. Correct.
Correct: Exporting SCC findings to a Cloud Storage bucket allows for long-term storage and analysis, which can aid in compliance and forensic investigations.
- E. Incorrect.
Incorrect: While remediating vulnerabilities is important, it is not necessary to remediate all issues before enabling additional security sources. Security is an ongoing process, and SCC can continue to monitor while remediation efforts are underway.