Exam Security-Operations-Engineer Topic 3 Question 7 Discussion

Actual exam question for Google's Security-Operations-Engineer exam
Question #: 7
Topic #: 3

You are threat hunting for an advanced threat group known for targeted, novel attacks by deploying campaign-specific infrastructure. You want to develop detections based on the threat group's behaviors so you can effectively detect whether the threat group has attacked your organization. What should you do?

A. Identify exposed technologies and products used by your organization, and develop detections to search for signs of exploitation. B. Find intelligence reports in Google Threat Intelligence that relate to the threat actor, identify their behavior in previous campaigns, and use the past behavior to design detections in Google Security Operations (SecOps). C. Search for the threat actor in Google Threat Intelligence, export the IOCs associated with the threat actor into a Google Security Operations (SecOps) list, and develop detections that reference this list. D. Search for the threat actor in Google Threat Intelligence, review the threat actor's tactics, techniques, and procedures (TTPs), and design detections based on the TTPs in Google Security Operations (SecOps).

Comments

0 Happy Clients

0 Shares

0 Demo Downloads

10 Years in Business