Google Professional Cloud Security Engineer Question 464
Select 3Google Cloud PlatformYour organization uses Security Command Center (SCC) to monitor and manage security findings across multiple Google Cloud projects. Recently, a new compliance requirement mandates that any high-severity findings must trigger an automated workflow to notify the security team via email. Which steps should you take to configure SCC to meet this requirement?
- A
Enable Security Command Center at the organization level and ensure all projects are included.
- B
Set up a Cloud Function to send email notifications and configure it to trigger based on Pub/Sub messages from SCC.
- C
Create a custom security finding using SCC to classify high-severity issues.
- D
Enable SCC notifications by creating a Pub/Sub topic and subscribing your Cloud Function to this topic.
- E
Use the SCC dashboard to manually monitor and send email notifications for high-severity findings.
Show answer and explanation
Correct answers: A, B, D
Explanation
To meet the compliance requirement of automated email notifications for high-severity findings, you need to enable SCC at the organization level to centralize monitoring, set up a Pub/Sub topic for SCC notifications, and configure a Cloud Function to send emails in response to these notifications. This ensures an automated and scalable solution for handling high-severity security findings.
- A. Correct.
Enabling SCC at the organization level ensures that all findings across projects are aggregated and can be acted upon. Without this step, you cannot centrally monitor or automate workflows.
- B. Correct.
A Cloud Function can be used to handle automated workflows, such as sending email notifications. Configuring it to respond to SCC findings is a key step in meeting the compliance requirement.
- C. Incorrect.
Creating a custom finding is not necessary in this scenario since SCC already classifies findings by severity, including high-severity ones.
- D. Correct.
SCC notifications must be tied to a Pub/Sub topic to enable automated workflows. Subscribing the Cloud Function to the Pub/Sub topic ensures that the function is triggered for relevant findings.
- E. Incorrect.
Manually monitoring the SCC dashboard does not meet the compliance requirement for automation and would be time-consuming and error-prone.