Exam Professional Cloud Security Engineer topic 1 question 269 discussion

https://cloud.google.com/security-command-center/docs/concepts-security-command-center-overview#cases-overview

D seems right to me. https://cloud.google.com/firewall/docs/firewall-policies-rule-details#threat-intelligence-fw-policy Firewall policy rules let you secure your network by allowing or blocking traffic based on Google Threat Intelligence data. For egress rules, specify the destination by using one or more destination Google Threat Intelligence lists.

The correct option is D. Since it is not necessary to send logs to Chronicle if you are already paying for SCC Premium, which can alert on any outbound traffic that triggers the Threat Intelligence firewall rule. Otherwise, I don't see any point in them explicitly telling you that you have contracted SCC Premium.

https://cloud.google.com/firewall/docs/firewall-policies-rule-details#threat-intelligence-fw-policy

https://cloud.google.com/chronicle/docs/overview Option B addresses the alert on suspicious outbound traffic while option D does not.

D is correct.

Answer D is correct as per Gemini: Subscribe to threat intelligence feeds that provide updated lists of known suspicious domains and IP addresses. Integrate these feeds with your security solutions to identify and block outbound connections to these resources.

I´m thinking D

I think it's B.