Exam Professional Cloud Security Engineer topic 1 question 269 discussion

Actual exam question from Google's Professional Cloud Security Engineer

Question #: 269
Topic #: 1

[All Professional Cloud Security Engineer Questions]

Your organization is using Security Command Center Premium as a central tool to detect and alert on security threats. You also want to alert on suspicious outbound traffic that is targeting domains of known suspicious web services. What should you do?

A. Create a DNS Server Policy in Cloud DNS and turn on logs. Attach this policy to all Virtual Private Cloud networks with internet connectivity.
B. Forward all logs to Chronicle Security Information and Event Management. Create an alert for suspicious egress traffic to the internet.
C. Create a Cloud Intrusion Detection endpoint. Connect this endpoint to all Virtual Private Cloud networks with internet connectivity.
D. Create an egress firewall policy with Threat Intelligence as the destination. Attach this policy to all Virtual Private Cloud networks with internet connectivity.

Show Suggested Answer

Suggested Answer: B 🗳️

by yokoyan at Sept. 6, 2024, 1:36 a.m.

Comments

Submit Cancel

BondleB

2 weeks, 5 days ago

Selected Answer: B

https://cloud.google.com/chronicle/docs/overview Option B addresses the alert on suspicious outbound traffic while option D does not.

upvoted 2 times

...

sanmeow

1 month, 1 week ago

Selected Answer: D

D is correct.

upvoted 1 times

...

brpjp

2 months ago

Answer D is correct as per Gemini: Subscribe to threat intelligence feeds that provide updated lists of known suspicious domains and IP addresses. Integrate these feeds with your security solutions to identify and block outbound connections to these resources.

upvoted 3 times

...

Pach1211

2 months, 1 week ago

I´m thinking D

upvoted 2 times

...

yokoyan

2 months, 2 weeks ago

Selected Answer: B

I think it's B.

upvoted 1 times

...

Exam Professional Cloud Security Engineer All Questions

View all questions & answers for the Professional Cloud Security Engineer exam