Scc Etd Secops Iam Lifecycle Remediation

Worked example. The correct answer is already marked and every option is explained below, so there is nothing to select here. To answer questions yourself, start the free trial.

An enterprise organization integrates its automated user lifecycle management system with Google Cloud. The security team needs to establish continuous security and access governance monitoring to identify lifecycle anomalies, such as dormant accounts being granted sensitive roles or unmanaged external identities receiving project-level privileges. Additionally, they require automated remediation to remove unauthorized permissions and disable compromised service accounts when these anomalies occur.

Which solution should the security team implement to satisfy these detection and remediation requirements?

Configure Cloud Logging log-based metrics with Cloud Monitoring alert policies, and route webhook notifications to Cloud Functions to delete IAM policy bindings from Cloud Identity.

Enable IAM Recommender with automated unattended rollout policies in Policy Intelligence to immediately apply role recommendations and remove unused permissions.

Export Cloud Asset Inventory resource feeds to BigQuery, schedule recurring SQL queries to locate dormant identities, and invoke Cloud Run jobs to revoke excess IAM permissions.

Enable Security Command Center Event Threat Detection using Cloud Audit Logs to identify anomalous IAM grants, and trigger Google Security Operations (SOAR) playbooks to automatically remediate unauthorized bindings and disable affected accounts.

Professional Cloud Security Engineer

Scc Etd Secops Iam Lifecycle Remediation

Related questions