Scc Sensitive Data Protection Integration

Worked example. The correct answer is already marked and every option is explained below, so there is nothing to select here. To answer questions yourself, start the free trial.

A security operations team uses Google Cloud Security Command Center (SCC) across an enterprise organization to monitor misconfigurations, vulnerabilities, and runtime threats identified by integrated services such as Security Health Analytics and Virtual Machine Threat Detection.

The team wants to enhance finding triage and response planning by contextualizing detected threats with data risk. Additionally, they need SCC's attack path simulation feature to automatically prioritize exposed resources according to the calculated sensitivity of the data they store.

Which configuration should the security team implement to meet these requirements?

Configure an Event Threat Detection finding export that triggers a Cloud Function to execute ad-hoc Cloud DLP inspection jobs for any resource referenced in an alert.

Configure Sensitive Data Protection discovery scan configurations with the appropriate inspection templates and enable the action to publish data profiles to Security Command Center.

Create custom Security Health Analytics rules that inspect storage object payloads directly and generate findings when unencrypted sensitive data is detected.

Enable Virtual Machine Threat Detection memory analysis to scan compute instances and stream raw memory dumps to Google Security Operations for data classification.

Professional Cloud Security Engineer

Scc Sensitive Data Protection Integration

Related questions