A security operations team needs to allow a service account to authenticate to the Google Cloud Security Command Center (SCC) API to programmatically retrieve findings. Which authentication method is most appropriate for a service account in this scenario?

Using the user's OAuth 2.0 credentials after a web-based login flow

Using a service account key with the Google Cloud Client Libraries

Using a JSON Web Token (JWT) signed with the user's password

Using an API key attached to the service account

Your organization needs to audit all actions performed by a service account that automates security operations. You want to capture both configuration changes and data access performed by this service account. What should you enable?

Enable only Admin Activity audit logs.

Enable both Admin Activity and Data Access audit logs for the project.

Enable only Data Access audit logs.

A security team wants to grant a user the ability to view findings in Security Command Center but NOT modify security policies. Which IAM role should be assigned?

Security Command Center Finding Editor

Google CloudProfessional Security Operations Engineer

Domain 1Objective 2

1.2 Configuring Access PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER Practice Questions (Page 2)

Part of the Platform operations domain, which accounts for 14% of the PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER exam.

23questions here

5free pages

6concepts

14%of the exam

Questions 6–10

6foundation · easy
A security operations team needs to allow a service account to authenticate to the Google Cloud Security Command Center (SCC) API to programmatically retrieve findings. Which authentication method is most appropriate for a service account in this scenario?
Select an answer first
7application · medium
Your organization needs to audit all actions performed by a service account that automates security operations. You want to capture both configuration changes and data access performed by this service account. What should you enable?
Select an answer first
8foundation · easy
An organization uses Okta as its identity provider and wants to allow its workforce to access Google SecOps without creating Google accounts. Which Google Cloud feature should be used?
Select an answer first
9foundation · easy
A security team wants to grant a user the ability to view findings in Security Command Center but NOT modify security policies. Which IAM role should be assigned?
Select an answer first
10foundation · easy
A security team wants to automate the retrieval of threat intelligence from Google Threat Intelligence (GTI) using a script. Which authentication method is recommended for this automation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER” is a trademark of its owner, used for identification only.

1.2 Configuring Access PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER Practice Questions (Page 2)

Questions 6–10

A security operations team needs to allow a service account to authenticate to the Google Cloud Security Command Center (SCC) API to programmatically retrieve findings. Which authentication method is most appropriate for a service account in this scenario?

Your organization needs to audit all actions performed by a service account that automates security operations. You want to capture both configuration changes and data access performed by this service account. What should you enable?

An organization uses Okta as its identity provider and wants to allow its workforce to access Google SecOps without creating Google accounts. Which Google Cloud feature should be used?

A security team wants to grant a user the ability to view findings in Security Command Center but NOT modify security policies. Which IAM role should be assigned?

A security team wants to automate the retrieval of threat intelligence from Google Threat Intelligence (GTI) using a script. Which authentication method is recommended for this automation?

Keep studying — Platform operations