Google Cloud Professional Cloud Security Engineer — Question 57

Your organization recently deployed a new application on Google Kubernetes Engine. You need to deploy a solution to protect the application. The solution has the following requirements:
✑ Scans must run at least once per week
✑ Must be able to detect cross-site scripting vulnerabilities
✑ Must be able to authenticate using Google accounts
Which solution should you use?

Answer options

• A. Google Cloud Armor
• B. Web Security Scanner
• C. Security Health Analytics
• D. Container Threat Detection

Correct answer: B

Explanation

The Web Security Scanner is designed to automatically scan applications for vulnerabilities, including cross-site scripting, making it the ideal choice for this scenario. In contrast, Google Cloud Armor focuses on protecting against DDoS attacks, Security Health Analytics primarily analyzes the overall security posture of your Google Cloud resources, and Container Threat Detection is aimed at identifying threats within containers rather than application vulnerabilities.