Which approach BEST improves detection of compromised service accounts in Google Cloud?

• A.Baseline service account behavior and alert on deviations
• B.Monitoring VM uptime
• C.Alerting on login failures only
• D.Disabling all service accounts You are managing the integration of Security Command Center (SCC) with downstream tooling.

Comment: *

Name: *

Email: *

Verification: *

Which Google Cloud security feature MOST helps enforce the principle of least privilege at scale?

• A.IAM predefined roles and conditional IAM policies
• B.VPC Firewall Rules
• C.Cloud NAT
• D.Binary Authorization

Comment: *

Name: *

Email: *

Verification: *

Your company requires PCI DSS v4.0 compliance for its cardholder data environment (CDE) in Google Cloud. You use a Security Command Center (SCC) security posture deployment based on the PCI DSS v4.0 template to monitor for configuration drift. This posture generates a finding indicating that a Compute Engine VM within the CDE scope has been configured with an external IP address. You need to take an immediate action to remediate the compliance drift identified by this specific SCC posture finding. What should you do?

• A.Navigate to the underlying Security Health Analytics (SHA) finding for PUBLIC_IP_ADDRESSon the VM, and mark this finding as fixed.
• B.Reconfigure the network interface settings for the VM to explicitly remove the assigned external IP address.
• C.Enable and enforce theconstraints/compute.vmExternallpAccess organization policy constraint at the project level for the project where the VM resides.
• D.Remove the CDE-specific tag from the VM to exclude the tag from this particular PCI DSS posture evaluation scan.

Comment: *

Name: *

Email: *

Verification: *

You are an incident response engineer at an organization that uses Google Security Operations (SecOps). You recently started monitoring IOCS in Applied Threat Intelligence using YARA-L rules. You have discovered that there are more false positive alerts than expected, which is causing noise for the SOC team. You need to reduce the number of false positive alerts. What should you do?

• A.Configure alert grouping for the most repetitive alerts.
• B.Create a playbook that automatically tunes the IOC source if its indicator confidence score (IC- Score) is between 60% and 80%.
• C.Modify the YARA-L rules to use an indicator confidence score (IC-Score) of 60% and above.
• D.Implement curated detections instead of custom YARA-L rules.

Comment: *

Name: *

Email: *

Verification: *

Your company is adopting a multi-cloud environment. You need to configure comprehensive monitoring of threats using Google Security Operations (SecOps). You want to start identifying threats as soon as possible. What should you do?

• A.Use Gemini to generate YARA-L rules for multi-cloud use cases.
• B.Use curated detections from the Cloud Threats category to monitor your cloud environment.
• C.Ask Cloud Customer Care to provide a set of rules recommended by Google to monitor your company's cloud environment.
• D.Use curated detections for Applied Threat Intelligence to monitor your company's cloud environment.

Comment: *

Name: *

Email: *

Verification: *