A company uses Google Cloud and wants to set up real-time monitoring for suspicious activity, such as multiple failed login attempts to a VM. They already have a SIEM that can receive logs via Pub/Sub. Which Google Cloud service should they use to collect and route the VM's system logs to the SIEM?

Cloud Logging with a sink to Pub/Sub

Cloud Functions to directly read VM logs

Which control helps ensure that logs have not been tampered with during transmission?

Disabling logging during transmission

EC-CouncilCloud Security Essentials

Domain 6Objective 1

Cloud Logging and Security Monitoring CSE Practice Questions (Page 10)

Part of the Cloud Security Monitoring and Incident Response domain, which makes up ~13% of our current practice bank.

48questions here

10free pages

8concepts

Questions 46–48

46application · medium
A company uses Google Cloud and wants to set up real-time monitoring for suspicious activity, such as multiple failed login attempts to a VM. They already have a SIEM that can receive logs via Pub/Sub. Which Google Cloud service should they use to collect and route the VM's system logs to the SIEM?
Select an answer first
47foundation · easy
A security analyst needs to review a record of who performed administrative actions in a cloud environment and when. Which type of cloud log is most appropriate for this purpose?
Select an answer first
48foundation · easy
Which control helps ensure that logs have not been tampered with during transmission?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSE” is a trademark of its owner, used for identification only.

Cloud Logging and Security Monitoring CSE Practice Questions (Page 10)

Questions 46–48

A company uses Google Cloud and wants to set up real-time monitoring for suspicious activity, such as multiple failed login attempts to a VM. They already have a SIEM that can receive logs via Pub/Sub. Which Google Cloud service should they use to collect and route the VM's system logs to the SIEM?

A security analyst needs to review a record of who performed administrative actions in a cloud environment and when. Which type of cloud log is most appropriate for this purpose?

Which control helps ensure that logs have not been tampered with during transmission?

Keep studying — Cloud Security Monitoring and Incident Response