試験Security-Operations-Engineer トピック3 問題120 スレッド

Google Security-Operations-Engineerのリアル試験問題集
問題 #: 120
トピック #: 3

You are threat hunting for an advanced threat group known for targeted, novel attacks by deploying campaign-specific infrastructure. You want to develop detections based on the threat group's behaviors so you can effectively detect whether the threat group has attacked your organization. What should you do?

A. Identify exposed technologies and products used by your organization, and develop detections to search for signs of exploitation.

B. Find intelligence reports in Google Threat Intelligence that relate to the threat actor, identify their behavior in previous campaigns, and use the past behavior to design detections in Google Security Operations (SecOps).

C. Search for the threat actor in Google Threat Intelligence, export the IOCs associated with the threat actor into a Google Security Operations (SecOps) list, and develop detections that reference this list.

D. Search for the threat actor in Google Threat Intelligence, review the threat actor's tactics, techniques, and procedures (TTPs), and design detections based on the TTPs in Google Security Operations (SecOps).

おすすめの解答：D 解答を投票する

The most effective approach is to search for the threat actor in Google Threat Intelligence, review their tactics, techniques, and procedures (TTPs), and design detections based on those TTPs in Google SecOps. Since advanced groups often use novel, campaign-specific infrastructure, IOC- based detection is insufficient. TTP-based detection captures the underlying attacker behaviors, increasing resilience against evolving tactics.

Fujino 2026-03-18 07:06:28

時間限定で

15%

オフ

プレミアムのSecurity-Operations-Engineer問題集のセルフテストエンジンまたはPDFをゲットしよう

試験Security-Operations-Engineer トピック3 問題120 スレッド

コメント