Professional Cloud Security EngineerManaging operationsEasy
A large e-commerce company uses Google Cloud for its global operations. Their security team needs a unified view of security findings, vulnerabilities, and compliance status across all projects and folders within their organization. They also want to integrate these findings with their existing Security Information and Event Management (SIEM) system. Which Google Cloud service is best suited to provide this centralized security management and integration capability?
- ACloud Monitoring
- BCloud Logging
- CSecurity Command Center (SCC)
- DChronicle Security Operations
Show answer & explanationAnswer & explanation
Correct answer: C. Security Command Center (SCC)
Security Command Center (SCC) provides centralized visibility into security posture across an entire Google Cloud organization, including findings from various security services like Event Threat Detection, Security Health Analytics, and Web Security Scanner. It also facilitates exporting these findings to SIEM systems.
Why the other options are wrong
- A. Cloud Monitoring focuses on operational metrics and alerting, not centralized security findings or compliance.
- B. Cloud Logging collects logs but doesn't provide a unified security posture view or SIEM integration out-of-the-box for findings.
- D. Chronicle Security Operations is a separate, advanced security analytics platform, whereas SCC provides the core centralized security management within Google Cloud.
Security Command Center (SCC)
A centralized security and risk management platform for Google Cloud that provides comprehensive visibility into security posture, identifies vulnerabilities and threats, and helps manage compliance across an organization.
- Aggregates findings from multiple security services.
- Provides a unified dashboard for security posture.
- Supports integration with SIEM systems.
- Operates at the organization level.
Memory trick: SCC is the 'Security Command Center' for your entire Google Cloud kingdom.