Professional Cloud Security EngineerManaging operationsEasy
A global e-commerce company uses Google Cloud for its infrastructure. They want to proactively monitor for suspicious activities, such as cryptocurrency mining, ransomware, and denial-of-service attacks, across their entire Google Cloud environment. They need a service that automatically analyzes logs for these specific threats and generates alerts. Which Google Cloud service should they use?
- AEvent Threat Detection (ETD) within Security Command Center.
- BCloud Logging with advanced queries and log-based metrics.
- CCloud Monitoring with custom metrics and alerting policies.
- DSecurity Health Analytics (SHA) within Security Command Center.
Show answer & explanationAnswer & explanation
Correct answer: A. Event Threat Detection (ETD) within Security Command Center.
Event Threat Detection (ETD) is specifically designed to analyze Google Cloud logs for specific threats like cryptocurrency mining, ransomware, and other suspicious activities, generating findings that appear in Security Command Center.
Why the other options are wrong
- B. Cloud Logging provides the logs and querying capabilities, but doesn't inherently provide automated threat detection for specific patterns like ETD does without significant custom development.
- C. Cloud Monitoring is for general operational metrics and custom alerts, not specifically pre-defined threat detection from logs.
- D. Security Health Analytics (SHA) focuses on misconfigurations and compliance, not real-time threat detection from log analysis.
Event Threat Detection (ETD)
A Security Command Center service that automatically monitors Google Cloud logs for specific, pre-defined threats like cryptocurrency mining, malware, and suspicious network activity.
- Analyzes logs from various Google Cloud services.
- Detects threats like crypto mining, ransomware, data exfiltration.
- Generates findings in Security Command Center.
- Part of Security Command Center Premium tier.
Memory trick: ETD detects bad events from logs, like a security guard on watch.