PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER · Question #82
Your company's risk management and compliance team requires regular reporting on compliance with industry standard control frameworks for a regulated business unit that continuously adds projects…
The correct answer is D. Implement the built-in posture for the compliance framework within the Security Command Center. The most efficient approach is to use the built-in posture for the compliance framework in Security Command Center (SCC). SCC continuously evaluates resources against the framework controls and provides evidence of non-compliant resources. You can generate reports directly from…
Question
Your company's risk management and compliance team requires regular reporting on compliance with industry standard control frameworks for a regulated business unit that continuously adds projects. You need to create a report that includes evidence of non-compliant resources found in this environment. How should you generate this report?
Options
- ARun an audit using the compliance framework in Audit Manager. Export the evaluation for
- BRun queries for the required controls using the Cloud Asset Inventory data stored in BigQuery.
- CImplement the control framework using Rego, and deploy this framework in Workload Manager.
- DImplement the built-in posture for the compliance framework within the Security Command Center
How the community answered
(52 responses)- A8% (4)
- B4% (2)
- C13% (7)
- D75% (39)
Explanation
The most efficient approach is to use the built-in posture for the compliance framework in Security Command Center (SCC). SCC continuously evaluates resources against the framework controls and provides evidence of non-compliant resources. You can generate reports directly from SCC, ensuring up-to-date, automated compliance visibility for the regulated business unit.
Topics
Community Discussion
No community discussion yet for this question.