Google Cloud Professional Cloud Security Engineer Practice Exam

What service should be used to check for Open Web Application Security Project (OWASP) vulnerabilities in an application deployed on App Engine?

1. Web Security Scanner

2. Threat Detection API

3. Security Center

4. Cloud Armor

The correct answer is: Web Security Scanner

Using the Web Security Scanner is the appropriate choice for checking for Open Web Application Security Project (OWASP) vulnerabilities in an application deployed on App Engine. This service is specifically designed to identify vulnerabilities in web applications, including those pertaining to the OWASP Top Ten security risks. Web Security Scanner actively scans your applications for common security issues, such as cross-site scripting (XSS), SQL injection, and insecure web configuration, aligning closely with the types of vulnerabilities outlined by OWASP. It automates the detection process and provides detailed reports that can help you remediate vulnerabilities effectively. Other available options, while valuable in their contexts, do not serve the specific purpose of scanning applications for OWASP vulnerabilities. For instance, the Threat Detection API is focused on identifying threats more broadly through logs and events, Security Center provides an overview for security management but is not explicitly for OWASP vulnerabilities, and Cloud Armor is primarily used for DDoS protection and web application firewall features rather than vulnerability scanning. Thus, for identifying web application vulnerabilities in a straightforward manner, Web Security Scanner is the tailored solution.