Cloud Digital Leader Google Cloud Security Practice Question
A security team needs to monitor and analyze logs from multiple GCP projects to detect threats across the organization. They require a SIEM solution that can ingest logs from on-premises and other clouds. Which service should they use?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Chronicle
Chronicle is a Google Cloud SIEM that ingests logs from various sources, including on-premises and other clouds, and provides threat detection. Security Command Center is for vulnerability scanning, not SIEM.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Security Command Center
Why it's wrong here
Security Command Center is a security and posture management service that aggregates vulnerability findings and misconfiguration risks across GCP, but it does not ingest or correlate raw logs from multiple clouds as a SIEM would. Its purpose is to prioritize and remediate security issues, not to provide persistent log-based threat detection and incident response. Therefore, while useful for visibility into GCP assets, it lacks the log analytics engine needed for multi-cloud SIEM workflows.
- ✗
Cloud IDS
Why it's wrong here
Cloud IDS is a network intrusion detection service that inspects traffic between subnets and on-premises networks for malicious signatures, operating at the packet and flow level. It does not analyze application logs or security telemetry from disparate cloud providers, and it offers no capabilities for querying historical log data or correlating events across environments. This makes it a complementary security control, not a substitute for log-driven SIEM analysis.
- ✓
Chronicle
Why this is correct
Chronicle is a cloud-native SIEM from Google Cloud designed to ingest, normalize, and analyze security logs from multiple cloud providers, on-premises systems, and SaaS applications. Its architecture leverages BigQuery for scalable log storage and provides advanced threat detection, retroactive analysis, and custom detection rules with low-latency searching. As a Google Cloud product purpose-built for security log analytics, it directly addresses the need to monitor and analyze logs across a multi-cloud environment.
- ✗
Cloud Logging
Why it's wrong here
Cloud Logging is a centralized log management and monitoring service that stores logs from GCP services and can receive logs from other sources, but it does not provide core SIEM capabilities such as entity correlation, threat detection rules, incident management, or security-specific analytics. Its primary focus is operational observability—like searching logs for troubleshooting—rather than performing the deep threat correlation and multi-source attack-chain reconstruction expected from a SIEM. Thus, while logs can be exported to a SIEM like Chronicle, Cloud Logging itself is not a SIEM solution.
Go deeper
Related to this question
Learn chapter
Cloud Digital Transformation
Key term
Vulnerability
A vulnerability is a weakness in a system, network, or software that could be exploited by a threat to cause harm or unauthorized access.
Key term
Vulnerability scanning
Vulnerability scanning is an automated process that identifies security weaknesses in systems, networks, and applications by comparing them against known vulnerability databases.
About these practice questions
One of 829 original GCDL practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This GCDL practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the GCDL exam.