Which three services can Google Cloud Security Scanner assess? (Choose three.)

Question

Options

• AGoogle Kubernetes Engine
• BBigQuery
• CCompute Engine
• DApp Engine
• EGoogle Virtual Private Cloud

• A
  91% (21)
• B
  4% (1)
• E
  4% (1)

Explanation

Google Cloud Security Scanner is a web vulnerability scanner designed to crawl and test web applications hosted on Google Cloud compute platforms - specifically App Engine (D), Compute Engine (C), and Google Kubernetes Engine (A) - checking for issues like XSS, Flash injection, mixed content, and outdated libraries.

BigQuery (B) is a serverless data warehouse with no web application surface to crawl, so Security Scanner has no meaningful attack vectors to test against it. Google Virtual Private Cloud (E) is a networking construct - it provides the network fabric but isn't itself an application or service that hosts web endpoints Security Scanner could probe.

Memory tip: Think of Security Scanner as a tool for running workloads - the three correct answers (App Engine, Compute Engine, GKE) are all services where you deploy and run applications, while BigQuery and VPC are infrastructure/data services that don't expose web app surfaces. If you can deploy a web server to it, Security Scanner can scan it.

No community discussion yet for this question.