Google
PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER · Question #134
A security analyst wants to detect lateral movement between Compute Engine instances using valid credentials. Which data source is MOST useful?
The correct answer is B. VPC Flow Logs. VPC Flow Logs reveal internal east-west traffic patterns that can expose lateral movement
Threat Detection and Monitoring
Question
A security analyst wants to detect lateral movement between Compute Engine instances using valid credentials. Which data source is MOST useful?
Options
- ACloud Load Balancer logs
- BVPC Flow Logs
- CCompute Engine serial console output
- DIdentity-aware Proxy logs
How the community answered
(38 responses)- A8% (3)
- B71% (27)
- C16% (6)
- D5% (2)
Explanation
VPC Flow Logs reveal internal east-west traffic patterns that can expose lateral movement
Topics
#VPC Flow Logs#lateral movement detection#network traffic analysis#Compute Engine security
Community Discussion
No community discussion yet for this question.