nerdexam
Google

PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #367

Your company has recently enabled Security Command Center at the organization level. You need to implement runtime threat detection for applications running in containers within projects residing in…

The correct answer is D. Enable Container Threat Detection in Security Command Center Premium tier for the projects. Enabling Container Threat Detection (CTD) in the Security Command Center Premium tier provides runtime monitoring for containerized workloads. It detects threats such as unexpected library loads or malicious script executions within containers and reports these as findings…

Submitted by chiamaka_o· Apr 18, 2026Managing operations within a cloud solution environment

Question

Your company has recently enabled Security Command Center at the organization level. You need to implement runtime threat detection for applications running in containers within projects residing in the production folder. Specifically, you need to be notified if additional libraries are loaded or malicious scripts are executed within these running containers. You need to configure Security Command Center to meet this requirement while ensuring findings are visible within Security Command Center. What should you do?

Options

  • ACreate log-based metrics and alerts in Cloud Logging and Cloud Monitoring for suspicious
  • BConfigure Security Health Analytics within Security Command Center to monitor container runtime
  • CEnsure that the containers in the production folder are running on hosts that are using Container-
  • DEnable Container Threat Detection in Security Command Center Premium tier for the projects

How the community answered

(27 responses)
  • A
    4% (1)
  • B
    11% (3)
  • C
    4% (1)
  • D
    81% (22)

Explanation

Enabling Container Threat Detection (CTD) in the Security Command Center Premium tier provides runtime monitoring for containerized workloads. It detects threats such as unexpected library loads or malicious script executions within containers and reports these as findings directly in Security Command Center, fulfilling both the detection and visibility requirements.

Topics

#Security Command Center#Container Threat Detection#Runtime threat detection#Container security

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice