Google Cloud Security Operations Quiz

1. What is the primary function of VPC Service Controls in security operations?

Isolate and restrict access to sensitive services

Encrypt all network traffic

Monitor firewall rule changes

Manage DNS records

2. In incident response, why is it important to enable immutable log retention in Cloud Logging?

To improve query performance

To prevent tampering with audit evidence

To reduce encryption overhead

To speed up incident detection

3. What does the Data Loss Prevention (DLP) API help detect in GCP?

Malware in container images

Sensitive data like PII and credentials

Network bottlenecks

Outdated software versions

4. Which authentication method is recommended for securing service accounts in GCP?

Long-lived API keys

Short-lived OAuth 2.0 tokens

Static passwords

No authentication required

5. What is the benefit of using log aggregation through Cloud Logging in security operations?

Faster VM startup times

Centralized visibility into security events across resources

Reduced storage costs

Improved application performance

6. How does Forseti help with continuous security compliance monitoring?

It encrypts data in transit

It scans for policy violations and generates compliance reports

It manages user authentication

It optimizes network performance

7. Which GCP service is used to enforce security policies across multiple projects?

Cloud Armor

Organization Policy

Cloud Firewall

VPC Peering

8. What does Cloud KMS protect against in terms of security operations?

DDoS attacks

Unauthorized key access and data exposure

SQL injection attacks

Network latency issues

9. In a security incident, which tool would you use to query large volumes of logs for pattern analysis?

Cloud Logging Console

BigQuery

Cloud Trace

Cloud Profiler

10. Which log type records changes to IAM policies and resource configurations?

Data Access Logs

Admin Activity Logs

System Event Logs

Application Logs

11. Which Google Cloud service provides comprehensive audit logging for tracking API calls and user activity?

Cloud Audit Logs

Cloud Logging

Cloud Monitoring

Cloud Trace

12. Which service allows you to detect anomalous behavior and potential security threats using machine learning?

Cloud Armor

VPC Service Controls

Event Threat Detection

Cloud KMS

13. How does Binary Authorization enhance container security in GCP?

It encrypts container images at rest

It ensures only verified images are deployed to GKE

It monitors container performance metrics

It manages container networking policies

14. What is the maximum retention period for Cloud Audit Logs in the default configuration?

30 days

90 days

1 year

Indefinite

15. Which IAM role would you assign to a security analyst who needs to view Cloud Audit Logs but not modify resources?

Editor

Viewer

Logs Viewer

Security Admin

16. In incident response workflows, what is the primary role of Cloud Audit Logs?

Preventing attacks before they occur

Providing forensic evidence of user actions and API calls

Blocking malicious IP addresses

Encrypting sensitive data

17. What does Cloud Security Command Center (Cloud SCC) help security teams accomplish?

Deploy firewalls and VPCs

Discover, analyze, and manage security findings across GCP

Encrypt databases automatically

Manage user passwords

18. Which log sink destination is ideal for long-term security compliance storage?

Cloud Pub/Sub

Cloud Storage

BigQuery

Cloud Logging

19. VPC Flow Logs capture traffic information between which network components?

Only VMs and external APIs

VMs, subnets, and the VPC network

Cloud Storage buckets and databases

Load balancers and firewalls only

20. What is the primary purpose of Cloud Armor in Google Cloud security?

Encrypt data at rest

Protect applications from DDoS and web-based attacks

Manage identity and access

Monitor network traffic performance

Google Cloud Security Engineer Security Operations Quiz