Prepare and test your skills
Prepare and test your skills
Free sample question, answered and explained below. The Professional Cloud Security Engineer practice bank has 1,343 more like it. Try 10 free: instant score, no account.
A security architect is designing a real-time log export architecture to stream telemetry from multiple Google Cloud projects into Google SecOps (Chronicle) for centralized threat detection and compliance auditing. The architecture must minimize operational management overhead, ensure delivery reliability, and strictly enforce authentication on ingested telemetry.
Which sequence of steps should the architect implement to securely deliver logs to Google SecOps?
Google SecOps (Chronicle) provides native Feeds functionality that allows ingestion of telemetry directly from Google Cloud services. Combining Cloud Logging log sinks, Cloud Pub/Sub, and Google SecOps Feeds establishes a fully managed, serverless, and secure real-time streaming pipeline.
This approach leverages native platform integration and built-in IAM service account token validation, ensuring maximum throughput, minimal latency, and robust transport-layer authentication without additional middleware.
This configuration routes logs from Cloud Logging to a Cloud Storage bucket and attempts to push object change notifications to a Google SecOps feed designed specifically for Amazon Data Firehose.
The requirement was to ingest AWS VPC Flow Logs or AWS CloudTrail logs from an Amazon Web Services environment into Google SecOps via Amazon Data Firehose.
This configuration routes logs to Cloud Pub/Sub and deploys a custom worker on Cloud Run using pull subscriptions to forward events to Chronicle via API keys.
ackDeadlineSeconds), concurrency scaling, and dead-letter queues.Custom in-flight transformations, filtering, or log enrichment had to be executed in code before sending the data to an external SIEM that lacks native Pub/Sub integration.
This configuration exports logs to BigQuery and relies on periodic scheduled SQL queries to format and export table data into Google SecOps.
roles/bigquery.admin violates the principle of least privilege, and running recurring transformation queries introduces unnecessary BigQuery compute costs.The goal was to build a security data lake for ad-hoc forensic SQL analysis and business intelligence reporting rather than real-time SIEM log ingestion.
Answer them yourself and get your score the moment you finish. No account needed.
Full access includes
Keep the momentum going with these hand-picked practice scenarios
Last updated Validated