Professional Security Operations EngineerDemo

By Google · Question Mode

QuestionQ114

Observability

Your company makes extensive use of Google-managed images on Compute Engine VM instances and has deployed Security Command Center Enterprise (SCCE) at the organization level. Because vulnerability exploits have recently increased, you want better visibility into operating system (OS) risks for every VM in your organization. You want to use managed services to improve security detection capabilities for these vulnerabilities with minimal effort.

What should you do?

  • A Enable VM Manager across your projects, and allow VM Manager to write findings to SCCE.
  • B Enable Virtual Machine Threat Detection in SCCE, and allow it to generate findings.
  • C Set up Google Open Source Vulnerability (OSV)-Scanner to scan all Compute Engine VMs. Configure a Google Security Operations (SecOps) forwarder to write logs to your Google SecOps instance.
  • D Create a custom Security Health Analytics (SHA) scanner to check the sourceImage of the compute disk. Check for matches in a vulnerability database.
Explanation

VM Manager uses OS inventory to identify CVEs affecting installed operating-system packages on supported Compute Engine VMs. When integrated with organization-level Security Command Center Enterprise, it automatically sends high- and critical-severity OS vulnerability findings to Security Command Center, providing centralized, managed visibility across projects. Virtual Machine Threat Detection is for detecting threats such as malware, rootkits, and cryptomining rather than identifying OS package CVEs.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!