Courseiva

PCSE Practice Question: Managing Operations in a Cloud Solution Environment

You need to configure automated remediation for high-severity SCC findings. When a finding of type 'VULNERABILITY' with severity 'HIGH' is created, a Cloud Function should execute a script to patch the vulnerable VM. Which architecture is correct?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Configure SCC to publish findings to a Pub/Sub topic, and set up a Cloud Function subscribed to that topic

SCC can publish findings to a Pub/Sub topic. A Cloud Function subscribed to that topic can then trigger remediation actions. The Cloud Function must filter findings by severity and type.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Configure SCC to publish findings to a Pub/Sub topic, and set up a Cloud Function subscribed to that topic

    Why this is correct

    This is the direct and recommended integration for automated response.

  • Configure SCC to send findings to Cloud Storage, then use Cloud Functions on object change

    Why it's wrong here

    Writing to Cloud Storage adds latency; Pub/Sub is the standard event-driven method.

  • Use Cloud Scheduler to poll SCC API every minute and trigger Cloud Function

    Why it's wrong here

    Polling is inefficient and not real-time; Pub/Sub push is better.

  • Configure SCC to send notifications to Cloud Logging, then create a log-based metric and alert to trigger Cloud Function

    Why it's wrong here

    This adds unnecessary complexity; SCC directly integrates with Pub/Sub.

About these practice questions

This PCSE question is part of Courseiva's 960-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This PCSE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCSE exam.