Professional Cloud Security EngineerConfiguring network securityMedium
A security auditor needs to regularly review all firewall rules configured across an organization's Google Cloud projects, including their effective policies, potential conflicts, and unused rules. The auditor also wants to understand the network topology and identify any open ports that deviate from security baselines. Which Google Cloud service provides a centralized view and analysis capabilities for this purpose?
- ANetwork Intelligence Center
- BCloud Audit Logs
- CCloud Security Command Center
- DSecurity Health Analytics
Show answer & explanationAnswer & explanation
Correct answer: A. Network Intelligence Center
Network Intelligence Center provides a comprehensive view of an organization's network topology, firewall insights, and connectivity tests, which directly addresses the auditor's need for reviewing firewall rules, identifying conflicts, and understanding network configuration.
Why the other options are wrong
- B. Cloud Audit Logs records administrative activities and data access, but does not provide a consolidated view of effective firewall policies or network topology analysis.
- C. Cloud Security Command Center is a security management and data risk platform, but Network Intelligence Center is more specific to network configuration analysis.
- D. Security Health Analytics is a service within Security Command Center that detects misconfigurations and vulnerabilities, but Network Intelligence Center is better for active network configuration review.
Network Intelligence Center
Network Intelligence Center is a suite of network monitoring, diagnostics, and optimization capabilities in Google Cloud.
- Centralized network visibility
- Firewall Insights feature
- Network Topology visualization
Memory trick: Seeing the network's brain helps secure its every move.