Exam Security-Operations-Engineer Topic 1 Question 81 Discussion

Actual exam question for Google's Security-Operations-Engineer exam
Question #: 81
Topic #: 1
You are responsible for managing threat intelligence and IOC lists in your organization. You have compiled a list of IOCs from recent incidents. You want to quickly and efficiently share the IOCs with other teams for collaboration and integration into their operational processes. What should you do?

Suggested Answer: A Vote an answer

The most efficient and collaborative approach is to create a reference list in Google SecOps and grant access to the other teams. This allows teams to directly use the IOCs in detection rules, playbooks, and investigations without manual file transfers, ensuring the data is consistently available and up-to-date across operational processes.

by shubhang at Dec 30, 2025, 03:43 AM

Limited Time Offer

15%

Off

Get Premium Security-Operations-Engineer Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
purplenoob5664
2026-01-05 23:47:57
Collections in GTI are for adding IOCs and sharing - https://gtidocs.virustotal.com/docs/ioc-collections
upvoted 1 times
...
shubhang
2025-12-30 03:43:37
Selected Answer: C
cOLLECTIONS ARE INBUILT FOR COLLABORATION AND ARE DYNAMIC, WHILE SHARING VIA MAIL IS MANUAL AND STALE
upvoted 1 times
...
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10