Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 248

Question

During a routine security review, your team discovered a suspicious login attempt to impersonate a highly privileged but regularly used service account by an unknown IP address. You need to effectively investigate in order to respond to this potential security incident. What should you do?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Check Event Threat Detection in Security Command Center for any related alerts. Cross-reference your findings with Cloud Audit Logs. Security Command Center centralizes security findings, threats, and compliance posture. Cloud Audit Logs record administrative and data-access activity for auditing and governance.

Google Cloud Professional Cloud Security Engineer PCSE — Question 248