Google Professional Cloud Security Engineer Question 465
Select 4Google Cloud PlatformYour organization has recently enabled Security Command Center (SCC) Premium tier to improve its security posture. You are tasked with configuring SCC to detect and monitor vulnerabilities across your Google Cloud projects. Which steps must you take to successfully configure SCC and ensure it is actively monitoring your environment?
- A
Enable the Security Command Center API for all relevant projects.
- B
Grant the 'Security Center Admin' role to users who need to configure SCC.
- C
Activate and configure built-in detectors like Web Security Scanner and Event Threat Detection.
- D
Manually upload threat intelligence feeds into SCC to enable detection.
- E
Set up notification channels to receive alerts for findings.
Show answer and explanation
Correct answers: A, B, C, E
Explanation
To effectively configure and monitor Security Command Center, you need to enable its API, assign the correct IAM roles, activate the built-in detectors, and set up notification channels for real-time alerts. While SCC leverages Google-managed threat intelligence, it does not require manual uploads of feeds, making Option 4 incorrect.
- A. Correct.
Correct: Enabling the Security Command Center API for all relevant projects is a mandatory step to use SCC features and start monitoring resources.
- B. Correct.
Correct: Granting the 'Security Center Admin' role is necessary for users to configure SCC, including enabling detectors and managing findings.
- C. Correct.
Correct: Activating and configuring built-in detectors is a key step in ensuring SCC can detect vulnerabilities and threats in your environment.
- D. Incorrect.
Incorrect: SCC does not require manual uploads of threat intelligence feeds, as it relies on Google-managed threat intelligence and built-in detectors.
- E. Correct.
Correct: Setting up notification channels allows your team to receive alerts in real-time, ensuring faster response to findings.