Google Professional Cloud Security Engineer Question 461
Select 3Google Cloud PlatformYour organization uses Google Cloud and wants to deploy Security Command Center (SCC) to monitor security risks across multiple projects. As the Professional Cloud Security Engineer, you are tasked with ensuring SCC is set up correctly to automatically detect vulnerabilities, misconfigurations, and threats. Which actions are required to properly configure and monitor SCC to achieve this goal?
- A
Enable Security Command Center at the organization level and assign the Security Center Admin IAM role to relevant users.
- B
Configure the desired SCC services such as Asset Inventory, Security Health Analytics, and Event Threat Detection.
- C
Manually enable SCC findings export to BigQuery to store historical findings data for tracking over time.
- D
Review and act on real-time findings in SCC by investigating and remediating risks in the Findings tab.
- E
Activate all SCC Premium features without configuring any IAM permissions for team members.
Show answer and explanation
Correct answers: A, B, D
Explanation
To configure and monitor Security Command Center effectively, you must enable it at the organization level, configure its services to detect various security risks, and ensure findings are monitored and addressed in real time. Assigning the proper IAM roles, like Security Center Admin, is critical for managing SCC. While exporting findings to BigQuery or enabling Premium features can be valuable, these steps are not strictly required for the initial configuration and monitoring of SCC.
- A. Correct.
Correct. Enabling SCC at the organization level ensures it can monitor all projects and resources under the organization. The Security Center Admin IAM role is necessary for users to manage SCC configurations.
- B. Correct.
Correct. Configuring SCC services like Asset Inventory, Security Health Analytics, and Event Threat Detection allows SCC to detect and report vulnerabilities, misconfigurations, and threats effectively.
- C. Incorrect.
Incorrect. While exporting findings to BigQuery can be useful for historical tracking, this is not a mandatory step to configure and monitor SCC for detecting vulnerabilities and threats.
- D. Correct.
Correct. Actively reviewing and addressing findings in SCC is essential to monitor and mitigate risks in real time.
- E. Incorrect.
Incorrect. Activating SCC Premium features without configuring proper IAM permissions will not allow users to manage or monitor SCC effectively.