Security Operations (GCP PCSE) Flashcards

GCP Professional Cloud Security Engineer Flashcards

Front	Back
How can API Monitoring improve application security on GCP?	By detecting unusual or unauthorized API usage patterns that may indicate security breaches.
How can audit logs help ensure compliance in GCP?	They record activities performed by users, roles, and services for accountability and traceability.
How can metrics be created in Cloud Monitoring?	By defining custom metrics and using system-provided metrics for deeper insights.
How can Pub/Sub help with log processing?	It streams logs to consumers for real-time analysis or storage workflows.
How can Service Monitoring in Cloud Monitoring enhance operational visibility?	By providing distributed tracing and dependency mapping for services across environments.
How can the GCP Error Reporting tool assist in security operations?	By aggregating and displaying application errors to help identify and address issues quickly.
How does Access Transparency enhance security operations in GCP?	By providing detailed logs of Google staff access to user-controlled data.
How does Cloud Identity & Access Management (IAM) enhance security in GCP?	By managing access permissions for users, groups, and services with the principle of least privilege.
How does Cloud Logging detect anomalies?	By using log-based metrics to track unusual patterns or thresholds.
How does Cloud Monitoring alert you to issues?	By enabling notifications based on predefined thresholds, metrics, and conditions.
How does Security Command Center integrate with threat intelligence?	It uses sources like Event Threat Detection to identify active threats and suspicious activity.
How does Security Command Center prioritize risks?	By categorizing findings based on severity levels such as critical, high, medium, or low.
How does Threat Intelligence in Security Command Center improve detection?	By leveraging external data sources to identify current threat patterns and suspicious activities.
How does VPC Flow Logs enhance network visibility?	By logging network traffic metadata from a Virtual Private Cloud (VPC).
What are Cloud Logging sinks used for?	They allow logs to be exported to destinations such as BigQuery, Cloud Storage, or Pub/Sub.
What are metric thresholds in Cloud Monitoring?	Predefined values that trigger alerts when exceeded, indicating potential problems.
What does a policy in Security Command Center do?	It applies security rules to detect and prevent misconfigurations and vulnerabilities.
What happens when you enable activity logging in Cloud Logging?	All user activity, including accessing and modifying resources, is recorded for auditing.
What is a finding in Security Command Center?	A representation of a potential security risk or vulnerability detected in your environment.
What is a key feature of Cloud Monitoring Dashboards?	They provide visualizations of metrics and logs for quick insights into system performance.
What is a playbook in the context of incident response in GCP?	A predefined set of steps to follow during specific types of security incidents.
What is BigQuery commonly used for in incident response?	Conducting log analysis and querying large datasets to identify suspicious patterns.
What is Cloud Logging used for in GCP?	It is used to store, search, analyze, and alert on logs from Google Cloud services and applications.
What is Event Threat Detection in Security Command Center?	A feature that scans logs for threats like malware, cryptomining, or brute force attacks.
What is OpenTelemetry	and how is it used in GCP monitoring?,An open-source framework for collecting telemetry data like traces, logs, and metrics to enhance observability.
What is Security Command Center in GCP?	It is a centralized tool to monitor, detect, and respond to security risks across Google Cloud.
What is Stackdriver Trace and how is it used in security operations?	It provides latency analysis for distributed applications to identify bottlenecks and potential issues.
What is the difference between Cloud Logging and Cloud Monitoring?	Cloud Logging focuses on log management while Cloud Monitoring focuses on operational performance and alerts.
What is the function of service accounts in GCP security?	They grant applications and workloads API and resource access scoped by IAM permissions.
What is the purpose of alerting policies in Cloud Monitoring?	To notify users or systems when specific conditions based on metrics are met.
What is the purpose of Cloud Monitoring?	It provides visibility into the performance, uptime, and overall health of applications and services in GCP.
What is the purpose of monitoring uptime checks in GCP?	To ensure external-facing services remain available and reliable.
What is the role of Cloud Audit Logs in Security Command Center?	To provide detailed information on access and modifications to GCP resources for threat detection.
What is the role of Google Cloud Armor in security operations?	It provides DDoS protection and WAF capabilities to mitigate security threats.
What is the significance of organization policies in GCP security?	They enforce governance rules across an organization to maintain compliance and security standards.
What is the use of log queries in Cloud Logging?	To search, filter, and analyze log data to identify specific events or patterns.
What is the value of exporting logs to BigQuery in security operations?	Allows for advanced querying, pattern detection, and integration with BI tools for analysis.
What role does Forseti Security play in GCP security operations?	It helps automate security analysis, policies, and misconfiguration detection in GCP environments.
What types of logs can be collected with Cloud Logging?	System logs, audit logs, and application logs.
Why is real-time log ingestion important in Cloud Logging?	For immediate analysis and response to security or operational issues.

GCP Professional Cloud Security Engineer

This deck reviews logging, monitoring, and incident response techniques in GCP using tools like Cloud Logging, Cloud Monitoring, and Security Command Center.

Share on...