Exam Professional Cloud Security Engineer topic 1 question 30 discussion

'B is the correct answer. Only Forseti security can have both 'past' and 'present' (i.e. historical) records of the resources. https://forsetisecurity.org/about/

Outdated questions- you should use asset inventory now.

D - SCC is supported by Gemini and not Forseti.

D is good answer in this case. Foreseti is outdated

It seems that for set is outdated and its features have been incorporated into security command center

D is good answer in this case. Foreseti is outdated

D is a good answer

For an actual recent answer, D is the correct one.

weird, Forseti - depreciated on Oct 2018, why was it even considered as an answer! 😉😁 https://forsetisecurity.org/news/2019/02/18/deprecate-1.0.html I'm going with option D

B is old way of doing things and things got updated

"B" is the correct answer. Forseti has been deprecated however it's capabilities and features (like asset inventory) have been incorporated into Security Command Center. https://cloud.google.com/security-command-center/docs/concepts-security-command-center-overview#inventory

Correct is A Problem with Forseti - it's a third party tool, and it's sunset archived now due to lack of involvement. Do you really think Google would care to place it in test? Using Resource Manager on the organization level is a good way to have a historical record of what was running in Google Cloud Platform at any point in time. This is because Resource Manager provides a centralized view of all of your organization's resources, including projects, folders, and organization policies. It's a native tool, so I would go for answer A.

B is the correct answer. "Keep track of your environment Take inventory snapshots of your Google Cloud Platform (GCP) resources on a recurring cadence so that you always have a history of what was in your cloud." https://forsetisecurity.org/

B is the correct answer. Only Forseti security can have both 'past' and 'present' (i.e. historical) records of the resources. https://forsetisecurity.org/about/

b of course

https://cloud.google.com/security-command-center Discover and view your assets in near-real time across App Engine, BigQuery, Cloud SQL, Cloud Storage, Compute Engine, Cloud Identity and Access Management, Google Kubernetes Engine, and more. Review historical discovery scans to identify new, modified, or deleted assets. Why not D?

And about D?