Google Professional Cloud Security Engineer Question 462
Select 4Google Cloud PlatformYour organization uses Google Cloud and has recently enabled Security Command Center (SCC) Premium to improve its security posture. As a Cloud Security Engineer, you are tasked with configuring SCC to detect and alert on vulnerabilities and threats across projects. Which of the following steps are required to properly configure and monitor Security Command Center?
- A
Enable Security Command Center at the organization level.
- B
Grant the required IAM roles, such as 'Security Center Admin', to appropriate users or groups.
- C
Manually scan for vulnerabilities in each project using the Security Command Center API.
- D
Enable findings sources, such as Web Security Scanner or Event Threat Detection, based on your organization's requirements.
- E
Set up notifications or Pub/Sub topics to receive alerts for new findings in real time.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
To properly configure and monitor Security Command Center, you need to enable it at the organization level, grant appropriate IAM roles, enable relevant findings sources, and set up notifications for real-time alerts. Manual vulnerability scanning is not required because SCC integrates with various Google Cloud services to automatically detect and report threats.
- A. Correct.
Correct: Security Command Center must be enabled at the organization level before it can be used to monitor security across all projects.
- B. Correct.
Correct: Assigning appropriate IAM roles, such as 'Security Center Admin' or 'Security Center Viewer', is necessary to allow users to configure and monitor SCC.
- C. Incorrect.
Incorrect: Vulnerabilities are automatically scanned and reported by SCC integrations and services like the Web Security Scanner. Manual scanning is not required.
- D. Correct.
Correct: Enabling findings sources allows SCC to collect security-related data and generate alerts based on your organization's needs.
- E. Correct.
Correct: Configuring notifications or Pub/Sub topics ensures that your team is alerted in real time when new findings are detected.