PCSE Practice Question: Managing Operations in a Cloud Solution Environment
You need to configure automated remediation for high-severity SCC findings. When a finding of type 'VULNERABILITY' with severity 'HIGH' is created, a Cloud Function should execute a script to patch the vulnerable VM. Which architecture is correct?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure SCC to publish findings to a Pub/Sub topic, and set up a Cloud Function subscribed to that topic
SCC can publish findings to a Pub/Sub topic. A Cloud Function subscribed to that topic can then trigger remediation actions. The Cloud Function must filter findings by severity and type.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Configure SCC to publish findings to a Pub/Sub topic, and set up a Cloud Function subscribed to that topic
Why this is correct
This is the direct and recommended integration for automated response.
- ✗
Configure SCC to send findings to Cloud Storage, then use Cloud Functions on object change
Why it's wrong here
Writing to Cloud Storage adds latency; Pub/Sub is the standard event-driven method.
- ✗
Use Cloud Scheduler to poll SCC API every minute and trigger Cloud Function
Why it's wrong here
Polling is inefficient and not real-time; Pub/Sub push is better.
- ✗
Configure SCC to send notifications to Cloud Logging, then create a log-based metric and alert to trigger Cloud Function
Why it's wrong here
This adds unnecessary complexity; SCC directly integrates with Pub/Sub.
Go deeper
Related to this question
About these practice questions
This PCSE question is part of Courseiva's 960-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCSE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCSE exam.