Questions

 

The deployment of Google SecOps follows a similar provisioning flow for single or multiple tenant architectures. Which answer best represents that flow?

 

• Configure GCP Environment, Deploy Tenant, Enable Authentication
• Configure GCP Environment, Define Authentication, Deploy Tenant
• Install agent on endpoints, Configure GCP Environment, Define Authentication
• Define Authentication, Configure GCP Environment, Install agent on endpoints

 

 

What authentication methods are currently supported for a Google SecOps tenant?

 

• Google Cloud Identity, Google Workforce Identity Federation, Federated Auth with SAML
• Google Cloud Identity, Google Workforce Identity Federation, Local Authentication Accounts
• Local Authentication Accounts, Google Cloud Identity, OpenIdentity Federation
• Google Cloud Identity, Local Authentication Accounts, Federated Auth with SAML

 

 

What API must be enabled with a project to allow it to bind to Google SecOps?

 

• Google SecOps API
• Ingestion API
• Chronicle API
• Backstory Deployment API

 

 

According to the SecOps Technical Overview & Architecture what API can be used to provision the SIEM component of a SecOps deployment?

 

• Customer Management API
• Chronicle Provisioning API v1
• Backstory Deployment API
• SecOps Management API

 

 

Which Google SecOps capability reduces operator toil and MTTR?

 

• Telemetry Collection
• Analytics & Detection
• Alert Triage & Automated Response
• Applied Threat Intel & ML

 

 

What three components make up the Google SecOps Entity Context Graph (ECG).

 

• Entity Context, Derived Context, Global Context
• Entity Context, Asset Context, Time Domain Context
• Host Context, Process Context, Time Domain Context
• Entity Context, Global Context, Local Context