PCSE Practice Question: Managing Operations in a Cloud Solution Environment
A security team wants to automatically detect anomalies in user behavior across Google Workspace and Google Cloud. Which TWO Security Command Center features can help?
⚠ Common exam trap
Candidates may mistakenly choose Compliance monitoring (Premium tier) because it can detect unusual patterns, but it is designed for compliance violations, not user behavior anomalies. Event Threat Detection is a better choice for detecting anomalous IAM activity and user behavior in Google Cloud, while Anomaly Detection covers both Workspace and Cloud.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Event Threat Detection
Event Threat Detection uses machine learning to identify anomalous IAM activity and suspicious behavior in Google Cloud, including patterns that may indicate compromised accounts or malicious activity. Anomaly Detection (Standard tier) uses machine learning to detect anomalies in user and resource activity across both Google Workspace and Google Cloud. Together, they provide coverage for detecting anomalies in user behavior across the organization.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Event Threat Detection
Why this is correct
Event Threat Detection detects anomalous IAM activity and suspicious behavior in Google Cloud, making it suitable for identifying anomalies in user behavior.
- ✗
VM Threat Detection
Why it's wrong here
VM Threat Detection focuses on threats within virtual machines, not user behavior across Workspace and Cloud.
- ✗
Compliance monitoring (Premium tier)
Why it's wrong here
Compliance monitoring (Premium tier) detects compliance violations and drift from compliance baselines, not anomalies in user behavior.
- ✓
Anomaly Detection (Standard tier)
Why this is correct
Anomaly Detection (Standard tier) uses machine learning to detect anomalies in user and resource activity across both Google Workspace and Google Cloud.
- ✗
Security Health Analytics
Why it's wrong here
Security Health Analytics identifies misconfigurations and vulnerabilities, not anomalies in user behavior.
Go deeper
Related to this question
About these practice questions
One of 960 original PCSE practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCSE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCSE exam.