1.2 Configuring Access PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   Your organization has a security operations team that uses Google SecOps. You need to ensure that all access to SecOps is audited. You have enabled Cloud Audit Logs. However, you notice that some actions are not being logged. What is the most likely reason?

   • AThe users are using API keys.
   • BThe users are accessing SecOps from a different region.
   • CAdmin Activity logs are disabled.
   • DData Access audit logs are disabled for the SecOps project.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   When configuring Workforce Identity Federation for a security tool, what is the primary purpose of the workforce identity pool?

   • ATo define the trust relationship with the external identity provider
   • BTo create Google accounts for users
   • CTo assign IAM roles to users
   • DTo store user passwords for the security tool
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   A security team needs to audit when a user reads sensitive data from a Google Cloud Storage bucket. Which type of Cloud Audit Logs must be enabled to capture this activity?

   • AData Access audit logs
   • BAdmin Activity audit logs
   • CPolicy Denied audit logs
   • DSystem Event audit logs
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A security analyst needs to view and update the state of findings in Security Command Center (SCC), but should not be able to modify the SCC configuration or manage other users' permissions. Which IAM role should you assign?

   • ASecurity Center Admin
   • BSecurity Center Admin Viewer
   • CSecurity Center Findings Editor
   • DSecurity Center Admin Editor
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   A developer wants to enable API access to Google SecOps (Chronicle) for a custom automation tool. Which of the following is a prerequisite for using the Chronicle API?

   • ACreating an API key and attaching it to the automation tool
   • BCreating a service account and assigning appropriate IAM roles
   • CConfiguring a VPN to the Chronicle API endpoint
   • DEnabling the Chronicle API and using the user's password
   Reveal Solution Discussion Select an answer first