4.2 Configuring Logging, Monitoring, and Detection PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which sequence correctly represents the incident response lifecycle in the context of logging and monitoring?

   • AMonitoring, logging, remediation, detection
   • BDetection, response, remediation, logging
   • CRemediation, detection, logging, monitoring
   • DLogging, monitoring, detection, response, remediation
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A security engineer needs to identify all outbound connections from a specific VM to a known malicious IP address over the past 24 hours. The engineer has VPC flow logs enabled and exported to Cloud Logging. Which approach should the engineer use?

   • AUse Log Analytics to query VPC flow logs for the VM's source IP and the malicious destination IP
   • BReview the VM's serial console output
   • CCheck the Cloud IDS findings for the VM
   • DEnable Packet Mirroring on the VM and review the mirrored traffic
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   By default, which type of Cloud Audit Log is enabled for all Google Cloud services?

   • ASystem Event audit logs
   • BPolicy Denied audit logs
   • CData Access audit logs
   • DAdmin Activity audit logs
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   A security analyst needs to search VPC flow logs for traffic to a specific external IP address. Which Google Cloud tool is designed for querying and analyzing such logs?

   • ALog Analytics
   • BSecurity Command Center
   • CCloud Monitoring
   • DCloud IDS
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A security auditor needs to review who accessed a specific sensitive object in a Cloud Storage bucket over the past month. The auditor wants to see the identity of the user and the action performed. Which logging configuration should be enabled to capture this information?

   • AEnable VPC flow logs for the VPC where the bucket is accessed
   • BEnable Packet Mirroring on the VM accessing the bucket
   • CEnable Cloud IDS on the project
   • DEnable data access audit logs for the Cloud Storage bucket
   Reveal Solution Discussion Select an answer first