Question 253 of 284
Single answerYour company's security vulnerability management policy wants a member of the security team to have visibility into vulnerabilities and other OS metadata for a specific Compute Engine instance. This Compute Engine instance hosts a critical application in your Google Cloud project. You need to implement your company's security vulnerability management policy. What should you do?
A• Ensure that the Ops Agent is installed on the Compute Engine instance.
• Create a custom metric in the Cloud Monitoring dashboard.
• Provide the security team member with access to this dashboard.
• Create a custom metric in the Cloud Monitoring dashboard.
• Provide the security team member with access to this dashboard.
✓B• Ensure that the Ops Agent is installed on the Compute Engine instance.
• Provide the security team member roles/osconfig.inventoryViewer permission.
• Provide the security team member roles/osconfig.inventoryViewer permission.
C• Ensure that the OS Config agent is installed on the Compute Engine instance.
• Provide the security team member roles/osconfig.vulnerabilityReportViewer permission.
• Provide the security team member roles/osconfig.vulnerabilityReportViewer permission.
D• Ensure that the OS Config agent is installed on the Compute Engine instance.
• Create a log sink to BigQuery dataset.
• Provide the security team member with access to this dataset.
• Create a log sink to BigQuery dataset.
• Provide the security team member with access to this dataset.
✓
Correct Answer: B
• Ensure that the Ops Agent is installed on the Compute Engine instance.<br > • Provide the security team member roles/osconfig.inventoryViewer permission.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.