Professional Security Operations EngineerDemo

Question

You manage a large fleet of Compute Engine instances. Security Health Analytics (SHA) has generated a CONFIDENTIAL_COMPUTING_DISABLED finding in Security Command Center (SCC). You need to remediate this finding quickly. What should you do?

A Delete the offending VM instance, and mute the finding.
B Delete the offending VM instance, and disable the SHA detector.
C Delete the offending VM instance, and manually mark the finding as inactive.
D Delete the offending VM instance, and allow the finding to be automatically marked as inactive.

Explanation

Confidential Computing can be enabled only when a Compute Engine instance is created, so an affected VM must be deleted and replaced with a Confidential VM. After a Security Health Analytics scan detects that the affected resource was deleted, it automatically changes the finding state to INACTIVE.

Learn more

Remediating Security Health Analytics findings

Professional Security Operations EngineerDemo

AstroTutor

Notes

Readiness

QuestionQ68

Community Discussion