Questions

Identify the key personas within an organization’s security team.

Select four that apply, and then click Submit.

 

• Chief Information Security Officer (CISO)
• Security Operations Center (SOC) Manager
• Project Manager
• Cloud Stakeholder
• Security Engineer

 

Identify some of the advanced features of Google’s work smarter, not harder policy.

Select six that apply, and then click Submit.

 

• Applied Threat Intelligence
• Playbook assistant
• Autonomous parsing
• Google Cloud curated detections
• Curated competitor intelligence
• Emerging threat curated detections
• Investigation assistant

 

Identify some of the advanced features of Google’s intel-driven security operations.

Select six that apply, and then click Submit.

 

• Curated views for investigation and triage insights
• Event-level enrichment
• Curated behavioral detections for emerging threats
• Active incident alerting
• Mid-level migration of workloads
• Sophisticated indicator matching
• DIY detection engineering and response automation

 

Given below are some statements about Mandiant Hunt for Google Security Operations (SecOps). Identify the correct statements.

Select three that apply, and then click Submit.

 

• Google maps results to MITRE’s ATT&CK so that you can see which controls were subverted to take decisive action.
• Mandiant Hunt leverages the power of Google SecOps and Security Command Center to swiftly identify anomalies and minimize the time attackers can dwell within your environment.
• Mandiant experts have exposed a wide range of threat actors from insiders, to financially motivated, to state-sponsored.
• Mandiant Hunt uses competitor data to identify malware and other threat actors within the customer organization.

 

Given below are some threat categories and their descriptions.

Drag and drop each threat category to its corresponding descriptions, and then click Submit.

 

• Cloud: Detect account compromise, Kubernetes abuse, and computer resource abuse. (This category focuses on threats specific to cloud environments, including misconfigurations, compromised cloud accounts, and vulnerabilities in cloud-native technologies like Kubernetes.)
• UEBA: Identify peer-group anomalies, excessive alert volumes, and suspicious logins. (UEBA is about detecting threats by analyzing the behavioral patterns of users and entities to spot deviations from the norm, often indicating insider threats or compromised accounts.)
• Identity: Spot unusual account creation, privilege escalation, and factor tampering. (This category is concerned with threats that target user identities and access management systems, including credential theft, unauthorized privilege changes, and attempts to bypass authentication factors.)
• Endpoint: Prioritize EDR alerts, prevent data loss, and detect malicious PowerShell activity. (Endpoint security focuses on protecting individual devices like laptops, desktops, and servers. EDR (Endpoint Detection and Response) tools are key here for monitoring and responding to threats at the device level, including malware, script-based attacks, and data exfiltration.)
• Network: Monitor malicious and anomalous network activity. (This covers threats that manifest on the network itself, such as unauthorized access, suspicious traffic patterns, command and control communications, and lateral movement.)
• Mandiant Emerging Threats: Track threat actor methodologies, nation-state activities, and top threats from M-Trends. (This refers to high-fidelity, expert-curated threat intelligence from Mandiant, providing insights into advanced threat actors, their evolving TTPs, and significant trends in the cyber threat landscape, often summarized in reports like M-Trends.)

 

Identify some of the key aspects of threat detection.

Select three that apply, and then click Submit.

 

• Detection engineering
• Detection maintenance
• Report analysis
• Threat research