1.2 Configuring Access PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER Practice Questions (Page 5)

Questions 21–23

1. 21foundation · easy

   A security analyst wants to review Cloud Audit Logs to determine who changed an IAM policy on a project. Which type of audit log should they analyze?

   • AAdmin Activity audit logs
   • BAccess Transparency logs
   • CSystem Event audit logs
   • DData Access audit logs
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   An organization wants to grant a service account the ability to manage Google SecOps (Chronicle) rules and feeds, but not delete the entire instance. Which IAM role should be assigned?

   • AChronicle Viewer
   • BChronicle Editor
   • CChronicle Admin
   • DSecurity Command Center Editor
   Reveal Solution Discussion Select an answer first
3. 23application · medium

   Your organization uses Google SecOps for threat detection. You need to grant a team of security analysts access to the SecOps console so they can view and triage alerts. The analysts are already managed in Google Cloud Identity. You want to minimize administrative overhead while ensuring they can only view alerts, not modify detection rules. What should you do?

   • ACreate a service account for each analyst and grant each service account the SecOps Editor role.
   • BShare the SecOps console URL with the analysts and rely on their existing Google account passwords for authentication.
   • CCreate a group in Cloud Identity, add the analysts to it, and grant the group the SecOps Viewer role in the SecOps project.
   • DAdd the analysts to the project's IAM policy with the roles/editor role so they can access all project resources.
   Reveal Solution Discussion Select an answer first