3.1 Performing Threat Hunting Across Environments PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER Practice Questions (Page 7)

Questions 31–34

1. 31application · medium

   A threat hunter is investigating a potential data breach. Security Command Center (SCC) has flagged a VM as having a high severity vulnerability. The hunter wants to use this information to enrich the investigation. Which SCC data would be MOST useful for developing a hypothesis about how the VM might have been compromised?

   • AThe list of all VMs in the project, to see if the vulnerable VM is part of a larger pattern.
   • BThe network tags applied to the VM, to see if it is exposed to the internet.
   • CThe IAM policy bindings for the VM's service account, to see what permissions it has.
   • DThe vulnerability details, including the CVE ID, the affected software, and the recommended fix.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   What is the primary goal of network investigation techniques in threat hunting?

   • ATo block all external traffic to the network
   • BTo monitor user behavior on endpoints
   • CTo configure firewall rules for better security
   • DTo identify patterns of network traffic that indicate malicious activity
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   Which Google Cloud tool is specifically designed for searching and analyzing logs with a user interface?

   • ALogs Explorer
   • BCloud Shell
   • CBigQuery
   • DSecurity Command Center
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   How does threat intelligence contribute to hypothesis development?

   • AIt automatically blocks all malicious traffic
   • BIt provides a list of all user passwords
   • CIt provides indicators of compromise and tactics that can be used to form hypotheses
   • DIt replaces the need for log analysis
   Reveal Solution Discussion Select an answer first