Exam Security-Operations-Engineer Topic 3 Question 50 Discussion

Actual exam question for Google's Security-Operations-Engineer exam
Question #: 50
Topic #: 3
Your organization has mission-critical production Compute Engine VMS that you monitor daily.
While performing a UDM search in Google Security Operations (SecOps), you discover several outbound network connections from one of the production VMs to an unfamiliar external IP address occurring over the last 48 hours. You need to use Google SecOps to quickly gather more context and assess the reputation of the external IP address. What should you do?

Suggested Answer: C Vote an answer

The fastest way to gather context and assess the reputation of the unfamiliar external IP is to search for the IP in the Alerts & IOCs page in Google SecOps. This page integrates with Google Threat Intelligence and enrichment data, allowing you to quickly evaluate whether the IP is malicious and see any related alerts or indicators in your environment.

by Christine at Aug 12, 2026, 11:55 PM

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

0
0
0
10