Google Professional Cloud Security Engineer Exam - Topic 4 Question 55 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam

Question #: 55
Topic #: 4

[All Professional Cloud Security Engineer Questions]

You manage your organization's Security Operations Center (SOC). You currently monitor and detect network traffic anomalies in your VPCs based on network logs. However, you want to explore your environment using network payloads and headers. Which Google Cloud product should you use?

ACloud IDS

BVPC Service Controls logs

CVPC Flow Logs

DGoogle Cloud Armor

EPacket Mirroring

Show Suggested Answer

Suggested Answer: E

by Izetta at Oct 27, 2022, 12:22 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Asuncion

4 months ago

I had no idea Packet Mirroring could do that!

upvoted 0 times

...

Alease

4 months ago

VPC Flow Logs are useful, but not for payloads, right?

upvoted 0 times

...

Fidelia

4 months ago

Wait, isn't Cloud IDS better for that?

upvoted 0 times

...

Lettie

4 months ago

Totally agree, Packet Mirroring gives you deep insights!

upvoted 0 times

...

Ezekiel

4 months ago

I think Packet Mirroring is the way to go for payloads.

upvoted 0 times

...

Deeann

5 months ago

I have a vague memory of Google Cloud Armor being related to security, but I don't think it deals with payloads directly.

upvoted 0 times

...

Viola

5 months ago

I practiced a similar question, and I think VPC Flow Logs are more about logging traffic rather than analyzing payloads.

upvoted 0 times

...

Nan

5 months ago

I’m not entirely sure, but I feel like Cloud IDS could also help with detecting anomalies in network traffic.

upvoted 0 times

...

Keneth

5 months ago

I remember studying about network traffic analysis, and I think Packet Mirroring might be the right choice for inspecting payloads.

upvoted 0 times

...

Sarah

5 months ago

Okay, let's think this through. We need to transform the APIs to hide the backend information and obscure the technology stack. I'm thinking an outbound policy scoped to the operation might be the way to go.

upvoted 0 times

...