Exam Professional Cloud Security Engineer topic 1 question 321 discussion

I agree with nah99, A and D seems reasonable given Vertex AI is mentioned.

Specifically mentions gemini/vertex, so definitely D. https://cloud.google.com/security-command-center/docs/security-posture-essentials-secure-ai-template A & E are both good, but the requirement is prevent and detect, which better lines to A.

A. Apply organization policy constraints. Detect and monitor drifts by using Security Health Analytics. Organization Policies: Enforcing organization policies (e.g., constraints on resource locations, API access, or service usage) helps standardize security practices across all environments. Developers can create and test environments without bypassing critical security controls. Security Health Analytics (SHA): SHA, available in Security Command Center Premium, detects and alerts on violations of security best practices and misconfigurations, such as overly permissive roles or public resource exposure. E. Implement the least privileged access Identity and Access Management roles to prevent misconfigurations. Least Privileged Access: Assigning IAM roles based on the principle of least privilege prevents users from making changes outside their scope of work, reducing misconfiguration risks.

Answer A D