Google Cloud Professional Security Operations Engineer PSOE — Question 14

The correct answer is C. Option C: Create a custom Security Health Analytics (SHA) module. Configure the detection logic to scan Cloud Asset Inventory data for compute.googleapis.com/Instance assets, and Search for the compliance=pci tag.

Explanation

Security Health Analytics detects cloud misconfigurations and compliance risks from asset configuration data. The other options (A, B, D) are less suitable because they add operational overhead, cost, or complexity, or they do not fully satisfy the stated requirement.