Courseiva
Cloud Security OperationsmediumMultiple SelectObjective-mapped

CCSP Cloud Security Operations Practice Question

An organization is using GCP and wants to implement cloud security posture management (CSPM) to continuously monitor configurations against the CIS Benchmark. Which TWO GCP services can be used for this purpose? (Choose two.)

⚠ Common exam trap

The CCSP exam often tests the distinction between logging services (Cloud Audit Logs) and active monitoring/compliance services (CSPM), leading candidates to mistakenly choose Cloud Audit Logs for configuration monitoring instead of Security Command Center or Cloud Asset Inventory.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Cloud Asset Inventory

Cloud Asset Inventory provides a historical view of all GCP resources and their configurations, enabling continuous monitoring against compliance frameworks like the CIS Benchmark. Security Command Center offers built-in CSPM capabilities, including automated scanning for CIS Benchmark violations and actionable recommendations to remediate misconfigurations.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Cloud VPN

    Why it's wrong here

    VPN is a network service.

  • Cloud Asset Inventory

    Why this is correct

    Provides a complete view of resources and can be used for compliance checks.

  • Security Command Center

    Why this is correct

    Includes Security Health Analytics for CIS Benchmark scanning.

  • Cloud Audit Logs

    Why it's wrong here

    Audit logs are for logging, not configuration scanning.

  • Cloud Functions

    Why it's wrong here

    Functions are for event-driven code, not CSPM.

About these practice questions

Courseiva writes every CCSP question from scratch — 964 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.