Free Google GCP-SOE-B Exam Dumps Questions & Answers

You work for a large international company that has several Compute Engine instances running in production. You need to configure monitoring and alerting for Compute Engine instances tagged with compliance-pci that have an external IP address assigned. What should you do?

• A.Use the PUBLIC_IP_ADDRESS Security Health Analytics (SHA) detector to identify Compute Engine instances with external IP addresses. Determine whether the compliance-pci tag exists on the instances.
• B.Create a custom Event Threat Detection module that alerts when a Compute Engine instance with the compliance-pci tag is assigned an external IP address.
• C.Deploy the compute.vmExternallpAccess organization policy constraint to prevent specific projects or folders with the compliance-pci tag from creating Compute Engine instances with external IP addresses.
• D.Create a custom Security Health Analytics (SHA) module. Configure the detection logic to scan Cloud Asset Inventory data for compute.googleapis.com/Instance assets, and Search for the compliance-pci tag.

Your team is responsible for cybersecurity for a large multinational corporation. You have been tasked with identifying unknown command and control nodes (C2s) that are potentially active in your organization's environment. You need to generate a list of potential matches within the Next 24 hours. What should you do?

• A.Review Security Health Analytics (SHA) findings in Security Command Center (SCC).
• B.Write a rule in Google Security Operations (SecOps) that scans historic network outbound connections against ingested threat intelligence Run the rule in a retrohunt against the full tenant.
• C.Write a YARA-L rule in Google Security Operations (SecOps) that compares network traffic of endpoints to low prevalence domains against recent WHOIS registrations.
• D.Load network records into BigQuery to identify endpoints that are communicating with domains outside three standard deviations of normal.

You are implementing Google Security Operations (SecOps) with multiple log sources. You want to closely monitor the health of the ingestion pipeline's forwarders and collection agents, and detect silent sources within five minutes. What should you do?

• A.Create a notification in Cloud Monitoring using a metric- absence condition based on sample policy for each collector_id.
• B.Create a Google SecOps SIEM dashboard to show the ingestion metrics for each log_type and collector_id.
• C.Create a Looker dashboard that queries the BigQuery ingestion metrics schema for each log_type and collector_id.
• D.Create an ingestion notification for health metrics in Cloud Monitoring based on the total ingested log count for each collector_id.

During a proactive threat hunting exercise, you discover that a critical production project has an external identity with a highly privileged IAM role. You suspect that this is part of a larger intrusion, and it is unknown how long this identity has had access. All logs are enabled and routed to a centralized organization-level Cloud Logging bucket, and historical logs have been exported to BigQuery datasets. You need to determine whether any actions were taken by this external identity in your environment. What should you do?

• A.Analyze IAM recommender insights and Security Command Center (SCC) findings associated with the external identity.
• B.Analyze VPC Flow Logs exported to BigQuery, and correlate source IP addresses with potential login events for the external identity.
• C.Execute queries against the centralized Cloud Logging bucket and the BigQuery dataset to filter for logs for where the principal email matches the external identity.
• D.Use Policy Analyzer to identity the resources that are accessible by the external identity. Examine the logs related to these resources in the centralized Cloud Logging bucket and the BigQuery dataset.

Which Google Cloud security feature MOST helps enforce the principle of least privilege at scale?

• A.Binary Authorization
• B.IAM predefined roles and conditional IAM policies
• C.Cloud NAT
• D.VPC Firewall Rules