Exam Professional Cloud Security Engineer All Questions

View all questions & answers for the Professional Cloud Security Engineer exam

Exam Professional Cloud Security Engineer topic 1 question 9 discussion

Actual exam question from Google's Professional Cloud Security Engineer

Question #: 9
Topic #: 1

[All Professional Cloud Security Engineer Questions]

A company has been running their application on Compute Engine. A bug in the application allowed a malicious user to repeatedly execute a script that results in the Compute Engine instance crashing. Although the bug has been fixed, you want to get notified in case this hack re-occurs.
What should you do?

A. Create an Alerting Policy in Stackdriver using a Process Health condition, checking that the number of executions of the script remains below the desired threshold. Enable notifications.
B. Create an Alerting Policy in Stackdriver using the CPU usage metric. Set the threshold to 80% to be notified when the CPU usage goes above this 80%.
C. Log every execution of the script to Stackdriver Logging. Create a User-defined metric in Stackdriver Logging on the logs, and create a Stackdriver Dashboard displaying the metric.
D. Log every execution of the script to Stackdriver Logging. Configure BigQuery as a log sink, and create a BigQuery scheduled query to count the number of executions in a specific timeframe.

Show Suggested Answer

Suggested Answer: A 🗳️

by rafaelc at March 14, 2020, 8:19 a.m.

Comments

Submit Cancel

rafaelc

Highly Voted 4 years, 9 months ago

The question asks "you want to get notified in case this hack re-occurs." Only A has notifications in the answer so that should be the answer as having dashboards in stackdriver wont notify you of anything.

upvoted 29 times

ananthanarayanante

4 years, 5 months ago

I agree it should be A

upvoted 7 times

...

serg3d

Highly Voted 4 years, 5 months ago

It's not necessary that running a malicious script multiple times will affect CPU usage. And, CPU usage can occur during usual normal workloads. A

upvoted 10 times

...

cloud_monk

Most Recent 9 months, 1 week ago

Selected Answer: A

Notification is only mentioned in A. So if customer wants to get notified then A is the correct answer.

upvoted 1 times

...

ced3eals

1 year, 1 month ago

Selected Answer: A

A is the valid answer

upvoted 1 times

...

rishi110196

1 year, 3 months ago

The correct answer is A

upvoted 2 times

...

jiiieee

1 year, 4 months ago

Selected Answer: A

Just simple -- User wants to get notifed

upvoted 1 times

...

standm

1 year, 7 months ago

Option A is the only relevant answer like many has suggested due to the keyword 'Notification'. Agreed 100%.

upvoted 2 times

...

DA95

1 year, 12 months ago

Selected Answer: A

Option A is the most appropriate solution to get notified in case the hack re-occurs. In this option, you can create an Alerting Policy in Stackdriver using a Process Health condition to check the number of executions of the script. You can set a threshold for the number of executions, and if the number of executions goes above the threshold, you can enable notifications to be alerted about the hack.

upvoted 4 times

DA95

1 year, 12 months ago

Option B is not an appropriate solution, as it does not address the issue of the hack re-occurring. Monitoring CPU usage alone may not be enough to detect a hack, as the CPU usage may not necessarily go above the threshold set in the alerting policy. Option C is also not an appropriate solution, as creating a user-defined metric and dashboard based on the logs of script executions will not alert you in real-time if the hack re-occurs. You would need to manually check the dashboard to see if the hack has re-occurred, which may not be practical in a high-security scenario. Option D is not an appropriate solution, as it involves logging the script executions to Stackdriver Logging and then configuring a BigQuery sink to count the number of executions. This would not alert you in real-time if the hack re-occurs, as you would need to wait for the scheduled query to run and then check the results.

upvoted 2 times

...

shayke

2 years ago

Selected Answer: A

a is the correct ans

upvoted 1 times

...

Premumar

2 years, 1 month ago

Selected Answer: A

Other options won't provide any notification to the user. So, the correct answer is A.

upvoted 1 times

...

GCP72

2 years, 3 months ago

Selected Answer: B

The correct answer is B

upvoted 3 times

...

SuperDevops

3 years, 1 month ago

I took the test yesterday and didn't pass, NO ISSUE is from here. The questions are totally new, don't use this dump.

upvoted 1 times

jits1984

3 years ago

What are you saying, where should we go for new dumps @SuperDevops?

upvoted 4 times

Jeanphi72

2 years, 4 months ago

These are Whizzlabs people: WhizzLabs is one of the worst place to train for exams and instead of trying to become better (maybe because of ignorance) they simply try to pull down good sites to learn with ...

upvoted 3 times

...

Jane111

3 years, 7 months ago

The bug has been fixed, so even if somebody runs the same script, it will affect nothing. Checking against the same script, creating Process-health policy will do nothing. But if the hack reaapears and the same script is run, the A will trigger

upvoted 3 times

...

Jane111

3 years, 7 months ago

The bug has been fixed, so even if somebody runs the same script, it will affect nothing. Checking against the same script, creating Process-health policy will do nothing

upvoted 2 times

...

Jane111

3 years, 7 months ago

There is no 'Process Health condition' but Process-health policy A process-health policy can notify you if the number of processes that match a pattern crosses a threshold. This can be used to tell you, for example, that a process has stopped running. This policy sends a notification to the specified notification channel when no process matching the string nginx, running as user www, has been available for more than 5 minutes:

upvoted 1 times

...

DebasishLowes

3 years, 10 months ago

Ans : A

upvoted 1 times

...

soukumar369

3 years, 11 months ago

A. Correct B. "CPU usage goes above this 80%". It's not granted that script execution will increase CPU usage. C&D. Not providing any notification

upvoted 3 times

...

Load full discussion...