nerdexam
Google

PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #375

You work at a company in a regulated industry and are responsible for ongoing security of the Cloud environment. You need to prevent and detect misconfigurations in a particular folder based on…

The correct answer is A. Create a Posture file by using custom and predefined SHA or organization policies. Enforce the. By creating a Posture file in Security Command Center (SCC) Premium, you can combine predefined Security Health Analytics (SHA) detectors with custom organization policies to enforce compliance at the folder level. This approach enables both continuous detection and prevention…

Submitted by suresh_in· Apr 18, 2026Ensuring compliance

Question

You work at a company in a regulated industry and are responsible for ongoing security of the Cloud environment. You need to prevent and detect misconfigurations in a particular folder based on specific compliance policies. You need to adhere to industry-specific compliance policies and policies that are internal to your company. What should you do?

Options

  • ACreate a Posture file by using custom and predefined SHA or organization policies. Enforce the
  • BCreate custom organization policies that follow specific business requirements. Enforce the
  • CEnable Assured Workloads on the folder level, with the specific control bundle appropriate for your
  • DUse Workload Manager with custom Rego policies to continuously scan the environment for

How the community answered

(46 responses)
  • A
    78% (36)
  • B
    7% (3)
  • C
    13% (6)
  • D
    2% (1)

Explanation

By creating a Posture file in Security Command Center (SCC) Premium, you can combine predefined Security Health Analytics (SHA) detectors with custom organization policies to enforce compliance at the folder level. This approach enables both continuous detection and prevention of misconfigurations aligned with industry-specific and internal compliance standards.

Topics

#Compliance Policy Enforcement#Misconfiguration Detection#Security Health Analytics#Security Posture Management

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice