PCSE Practice Question: Managing Operations in a Cloud Solution Environment
A company uses Security Command Center (SCC) Premium tier and wants to automatically trigger a Cloud Function to remediate a threat finding. Which approach should they use?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure SCC to send findings to a Pub/Sub topic, and subscribe a Cloud Function to that topic.
SCC can send real-time notifications via Pub/Sub when findings of certain types or severities are created. A Cloud Function can subscribe to that topic to perform automated remediation. Cloud Scheduler cannot be triggered by events; Cloud Tasks is for asynchronous task execution but not designed for event-driven triggers from SCC; Logs Router exports logs but does not directly trigger Cloud Functions based on findings.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Configure SCC to send findings to a Pub/Sub topic, and subscribe a Cloud Function to that topic.
Why this is correct
This is the correct pattern: SCC notifications via Pub/Sub trigger a Cloud Function for automated response.
- ✗
Use Cloud Tasks to periodically invoke Cloud Functions after reading findings from Security Command Center API.
Why it's wrong here
Cloud Tasks is for asynchronous task distribution, not event-driven triggers. Polling the API is inefficient.
- ✗
Create a Cloud Scheduler job that polls SCC findings periodically and invokes Cloud Functions.
Why it's wrong here
Cloud Scheduler is for scheduled jobs, not event-driven triggers; polling is inefficient and not recommended.
- ✗
Export SCC findings to Cloud Storage, and set up a Cloud Function on object finalize.
Why it's wrong here
Exporting findings to Cloud Storage and triggering a Cloud Function on object finalize introduces latency and lacks real-time streaming, whereas SCC Premium tier supports Pub/Sub-based continuous export for immediate threat response. This approach is tempting because Cloud Storage triggers are a common, straightforward pattern for batch processing of exported logs, and would be correct for periodic compliance reporting or non-urgent data aggregation where seconds of delay are acceptable.
Quick reference
Cloud Service Model Comparison
| Model | You Manage | Provider Manages | Examples |
|---|---|---|---|
| IaaS | OS, runtime, apps, data | Hardware, hypervisor, networking | EC2, Azure VMs, GCP Compute Engine |
| PaaS | Apps and data | OS, runtime, middleware, hardware | Elastic Beanstalk, Azure App Service |
| SaaS | Data and settings only | Everything else | Microsoft 365, Salesforce, Workday |
| FaaS / Serverless | Function code only | Infra, scaling, runtime | Lambda, Azure Functions, Cloud Run |
| CaaS | Containers and apps | Kubernetes, OS, hardware | EKS, AKS, GKE |
Go deeper
Related to this question
About these practice questions
This PCSE question is part of Courseiva's 960-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCSE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCSE exam.