Professional Cloud Security EngineerConfiguring network securityMedium
An organization uses Google Cloud and has several applications deployed across multiple regions. They want to centralize the management of all their firewall rules, identify unused or overly permissive rules, and gain insights into potential security risks. Which Google Cloud networking service is designed to provide these capabilities?
- ANetwork Intelligence Center
- BSecurity Command Center
- CCloud Firewall Rules
- DCloud Audit Logs
Show answer & explanationAnswer & explanation
Correct answer: A. Network Intelligence Center
Network Intelligence Center provides a comprehensive view of network performance and security in Google Cloud. Its Firewall Insights feature specifically helps identify unused, shadowed, or overly permissive firewall rules, and provides insights into their impact.
Why the other options are wrong
- B. Security Command Center is a broader security management platform that aggregates findings, but Network Intelligence Center provides the deep network-specific insights.
- C. Cloud Firewall Rules are the rules themselves; this option refers to the mechanism, not a service for managing and analyzing them centrally for insights.
- D. Cloud Audit Logs provide activity logs but not direct analysis or insights into firewall rule efficacy or risks.
Network Intelligence Center (Firewall Insights)
Network Intelligence Center's Firewall Insights provides analytics and insights into Google Cloud firewall rules, helping identify optimization opportunities and potential security risks.
- Identifies unused, shadowed, and overly permissive firewall rules.
- Helps understand the impact of firewall rules.
- Centralizes visibility for network security posture.
Memory trick: NIC is your network's 'eyes and brain' for security.