A security team reviews their detection tools and finds that they have no visibility into network traffic between their Google Cloud VMs. Which tool would fill this coverage gap?

Google Threat Intelligence (GTI)

A company uses Security Command Center (SCC) for vulnerability management and Chronicle SecOps for SIEM. They want to automate the response to critical findings, such as automatically disabling a compromised VM. What is the most effective way to achieve this?

Use a Chronicle SOAR playbook triggered by SCC findings that calls Cloud Functions to isolate the VM.

Configure SCC to automatically disable any VM with a critical finding.

Use Cloud IDS to block traffic to the compromised VM.

Manually review each SCC finding and then run a script to disable the VM.

Which benefit does automation provide to a security operations team's detection and response process?

Elimination of all security incidents

Removal of the need for human analysts

Guaranteed prevention of false positives

Google CloudProfessional Security Operations Engineer

Domain 1Objective 1

1.1 Enhancing Detection and Response PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER Practice Questions (Page 2)

Part of the Platform operations domain, which accounts for 14% of the PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER exam.

26questions here

6free pages

5concepts

14%of the exam

Questions 6–10

6foundation · easy
An organization uses both Security Command Center (SCC) and a third-party vulnerability scanner. Although both tools detect vulnerabilities, the team justifies the overlap. Which security principle best supports this justification?
Select an answer first
7foundation · easy
A security team reviews their detection tools and finds that they have no visibility into network traffic between their Google Cloud VMs. Which tool would fill this coverage gap?
Select an answer first
8application · medium
A company uses Security Command Center (SCC) for vulnerability management and Chronicle SecOps for SIEM. They want to automate the response to critical findings, such as automatically disabling a compromised VM. What is the most effective way to achieve this?
Select an answer first
9foundation · easy
Which benefit does automation provide to a security operations team's detection and response process?
Select an answer first
10foundation · easy
A security team wants to automatically block malicious IPs identified by Cloud IDS. Which Google Cloud service can be used to automate this response?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER” is a trademark of its owner, used for identification only.

1.1 Enhancing Detection and Response PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER Practice Questions (Page 2)

Questions 6–10

An organization uses both Security Command Center (SCC) and a third-party vulnerability scanner. Although both tools detect vulnerabilities, the team justifies the overlap. Which security principle best supports this justification?

A security team reviews their detection tools and finds that they have no visibility into network traffic between their Google Cloud VMs. Which tool would fill this coverage gap?

A company uses Security Command Center (SCC) for vulnerability management and Chronicle SecOps for SIEM. They want to automate the response to critical findings, such as automatically disabling a compromised VM. What is the most effective way to achieve this?

Which benefit does automation provide to a security operations team's detection and response process?

A security team wants to automatically block malicious IPs identified by Cloud IDS. Which Google Cloud service can be used to automate this response?

Keep studying — Platform operations