3.1 Performing Threat Hunting Across Environments PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which of the following is a key data source for endpoint investigation?

   • AVPC flow logs
   • BCloud Load Balancing logs
   • CDNS logs
   • DOS event logs
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which of the following is an example of using Google Threat Intelligence to inform a hypothesis?

   • AGTI reports a new malware campaign using a specific file hash, so we search for that hash in our environment
   • BA firewall rule is misconfigured, so we check for exposure
   • CA past incident involved data exfiltration, so we look for similar patterns
   • DA user logs in from a new IP, so we investigate
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is the primary role of Security Command Center (SCC) in threat hunting?

   • ATo manage user identities
   • BTo replace the need for log analysis
   • CTo provide security posture and asset information that can enrich threat hypotheses
   • DTo automatically respond to all threats
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which SCC feature is most directly useful for adding context to a threat hunting investigation?

   • ABilling reports
   • BAsset inventory and vulnerability findings
   • CCloud Shell
   • DIAM policies
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What type of threat pattern might an endpoint investigator look for in OS event logs?

   • AA high volume of network traffic to a known website
   • BAn unusual sequence of process executions
   • CA change in firewall rules
   • DAn increase in CPU usage
   Reveal Solution Discussion Select an answer first