What is the purpose of a log sink in Cloud Logging?

To filter and route log entries to supported destinations

To create alerts based on log content

To store logs in a database for querying

What is the primary purpose of the 'monitoring' phase in the incident response lifecycle?

To delete logs that are no longer needed

To permanently store all logs for compliance

To immediately block all suspicious traffic

To continuously review logs and metrics for signs of security incidents

A security operations team receives an alert from Security Command Center about a VM that is communicating with a known command-and-control server. The team needs to contain the threat and then investigate the scope of the compromise. Which sequence of actions should they take?

Immediately delete the VM and then review Cloud Audit Logs

Isolate the VM by applying a firewall rule that blocks its traffic, then use VPC flow logs to identify other affected resources

Take a snapshot of the VM's disk and then restore it from a known-good backup

Disable the VM's external IP and then review Cloud IDS findings

Google CloudProfessional Cloud Security Engineer

Domain 4Objective 2

4.2 Configuring Logging, Monitoring, and Detection PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 5)

Part of the Managing operations domain, which accounts for 19% of the PROFESSIONAL-CLOUD-SECURITY-ENGINEER exam.

27questions here

6free pages

8concepts

19%of the exam

Questions 21–25

21foundation · easy
What is the purpose of a log sink in Cloud Logging?
Select an answer first
22foundation · easy
A security engineer needs to capture full packet payloads of traffic between two VMs in a VPC for forensic analysis. Which network log source should they use?
Select an answer first
23foundation · easy
What is the primary purpose of the 'monitoring' phase in the incident response lifecycle?
Select an answer first
24application · medium
A security operations team receives an alert from Security Command Center about a VM that is communicating with a known command-and-control server. The team needs to contain the threat and then investigate the scope of the compromise. Which sequence of actions should they take?
Select an answer first
25foundation · easy
Which Security Command Center feature allows you to continuously evaluate your resources against security best practices and compliance frameworks?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.

4.2 Configuring Logging, Monitoring, and Detection PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 5)

Questions 21–25

What is the purpose of a log sink in Cloud Logging?

A security engineer needs to capture full packet payloads of traffic between two VMs in a VPC for forensic analysis. Which network log source should they use?

What is the primary purpose of the 'monitoring' phase in the incident response lifecycle?

A security operations team receives an alert from Security Command Center about a VM that is communicating with a known command-and-control server. The team needs to contain the threat and then investigate the scope of the compromise. Which sequence of actions should they take?

Which Security Command Center feature allows you to continuously evaluate your resources against security best practices and compliance frameworks?

Keep studying — Managing operations