Questions

Data from Chronicle can be transparently copied out into what data warehouse for further analytics?

 

Select one that applies, and then click Submit.

• Google BigData
• Google BigQuery
• Google Datastore
• Google Firestore

 

Over what time span will Chronicle Security Information and Event Management (SIEM) re-evaluate Indicators of Compromise (IOCs) and create new correlations and alerts?

 

Select one that applies, and then click Submit.

• 72 hours
• 1 month
• 1 week
• 1 year

 

There are rules that are created by the customer or owner of a Chronicle Security Information and Event Management (SIEM) tenant, and there are a group of rules developed by Uppercase based on Google threat intelligence. What is the Google-provided rules called?

 

Select one that applies, and then click Submit.

• Default Rules
• Curated Rules
• Template Rules
• Repo Rules

 

What is the product name of the largest threat observatory, operated by Google, that plugs directly into Chronicle?

 

Select one that applies, and then click Submit.

• Google Cloud Threat Intelligence (GCTI)
• Emerging Threats
• VirusTotal
• Mandiant Red Threats

 

What three components make up the Chronicle Entity Context Graph (ECG)?

 

Select one that applies, and then click Submit.

• Entity Context, Asset Context, and Time Domain Context
• Host Context, Process Context, and Time Domain Context
• Entity Context, Global Context, and Local Context
• Entity Context, Derived Context, and Global Context

 

Aliasing applies to what kinds of entities in Chronicle Security Information and Event Management (SIEM)?

 

Select one that applies, and then click Submit.

• Users, Internet Protocol (IP) Addresses, Domains, and Indicators of Compromise (IOCs)
• Users, Processes, Assets, and Hashes
• Internet Protocol (IP) Addresses, Hostnames, and Domains
• Users, Hostnames, Binaries, and Indicators of Compromise (IOCs)