Exam Security-Operations-Engineer Topic 2 Question 6 Discussion
Actual exam question for Google's Security-Operations-Engineer exam
Question #: 6
Topic #: 2
Question #: 6
Topic #: 2
A SOC team notices repeated outbound HTTPS connections from a Compute Engine instance to an external IP every 60 seconds. CPU usage is normal and no malware signatures trigger. What is the BEST next analytical step?
Suggested Answer: C Vote an answer
Understanding what is generating the traffic and under which identity is essential before containment.
by Miranda at Jul 30, 2026, 11:38 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).