Exam Security-Operations-Engineer Topic 2 Question 70 Discussion
Actual exam question for Google's Security-Operations-Engineer exam
Question #: 70
Topic #: 2
Question #: 70
Topic #: 2
You are a security analyst at a company that uses Google Security Operations (SecOps) Enterprise. Security Command Center Enterprise (SCCE), and Google Threat Intelligence (GTI).
You need to leverage threat intelligence to improve threat hunting capabilities to proactively identify novel and emerging attack patterns targeting your Google Cloud environment in near real-time. What should you do?
You need to leverage threat intelligence to improve threat hunting capabilities to proactively identify novel and emerging attack patterns targeting your Google Cloud environment in near real-time. What should you do?
Suggested Answer: B Vote an answer
The correct solution is to configure an Applied Threat Intelligence Fusion Feed in Google SecOps and then develop YARA-L detection rules to search your Google Cloud telemetry for attack patterns tied to this intelligence. This enables proactive, near real-time hunting of novel and emerging threats by correlating threat intelligence with your organization's ingested data.
by Kim at Jun 29, 2026, 07:15 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).