CCSP Cloud Security Operations Practice Question
An organization is using GCP and wants to implement cloud security posture management (CSPM) to continuously monitor configurations against the CIS Benchmark. Which TWO GCP services can be used for this purpose? (Choose two.)
⚠ Common exam trap
The CCSP exam often tests the distinction between logging services (Cloud Audit Logs) and active monitoring/compliance services (CSPM), leading candidates to mistakenly choose Cloud Audit Logs for configuration monitoring instead of Security Command Center or Cloud Asset Inventory.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Cloud Asset Inventory
Cloud Asset Inventory provides a historical view of all GCP resources and their configurations, enabling continuous monitoring against compliance frameworks like the CIS Benchmark. Security Command Center offers built-in CSPM capabilities, including automated scanning for CIS Benchmark violations and actionable recommendations to remediate misconfigurations.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Cloud VPN
Why it's wrong here
VPN is a network service.
- ✓
Cloud Asset Inventory
Why this is correct
Provides a complete view of resources and can be used for compliance checks.
- ✓
Security Command Center
Why this is correct
Includes Security Health Analytics for CIS Benchmark scanning.
- ✗
Cloud Audit Logs
Why it's wrong here
Audit logs are for logging, not configuration scanning.
- ✗
Cloud Functions
Why it's wrong here
Functions are for event-driven code, not CSPM.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CCSP question from scratch — 964 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.