Professional Cloud Security EngineerDemo

By Google · Question Mode

QuestionQ49

Ensuring data protection

Your organization has recently enabled the Security Command Center (SCC) standard tier. Several Cloud Storage buckets were accidentally made publicly accessible. You must investigate the incident's impact and remediate it.

What should you do?

  • A
    1. Remove the Identity and Access Management (IAM) granting access to all Users from the buckets.2. Apply the organization policy storage.uniformBucketLevelAccess to prevent regressions.3. Query the data access logs to report on unauthorized access.
  • B
    1. Change permissions to limit access for authorized users.2. Enforce a VPC Service Controls perimeter around all the production projects to immediately stop any unauthorized access.3. Review the administrator activity audit logs to report on any unauthorized access.
  • C
    1. Change the bucket permissions to limit access.2. Query the bucket's usage logs to report on unauthorized access to the data.3. Enforce the organization policy storage.publicAccessPrevention to avoid regressions.
  • D
    1. Change bucket permissions to limit access.2. Query the data access audit logs for any unauthorized access to the buckets.3. After the misconfiguration is corrected, mute the finding in the Security Command Center.
Explanation

Cloud Storage usage logs can provide information about access requests to publicly accessible resources, whereas Cloud Audit Logs does not track access to public objects. After restricting the bucket permissions, enforcing the storage.publicAccessPrevention organization policy prevents applicable buckets from being made public through IAM policies or ACLs.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!