Questions

Identify how a playbook is selected for an alert generated in Chronicle Security Orchestration, Automation, and Response (SOAR).

 

Select one that applies, and then click Submit.

• Manually, from a selection of playbooks
• Automatically, based on the alert

 

What does Chronicle Security Orchestration, Automation, and Response (SOAR) use to group related alerts into threat-centric cases?

 

Select one that applies, and then click Submit.

• Integration with VirusTotal solution
• Patented technology
• Artificial Intelligence (AI) Security Workbench

 

What are the top Go-to-Market (GTM) plays for Chronicle Security Operations (SecOps)?

 

Select one that applies, and then click Submit.

• Standard Security Information and Event Management (SIEM) (new or replacement) and SIEM augmentation only
• Security Information and Event Management (SIEM) augmentation only
• Standard Security Information and Event Management (SIEM) (new or replacement), SIEM augmentation, Cloud Threat Detection and Incident Response (TDIR), and Security Operations Center (SOC) transformation

 

Which segments are considered warm or hot and have the qualification lead for Chronicle Security Operations (SecOps)?

 

Select two that apply, and then click Submit.

• Small and Midsize Business (SMB) with no Security Information and Event Management (SIEM) usage, up to one analyst, no security operations team, and less than 10 daily meaningful alerts
• Medium with minimal Security Information and Event Management (SIEM) capabilities, two to three full-time analysts, some alert handling, and 11–100 daily meaningful alerts
• Medium enterprise with mid-range Security Information and Event Management (SIEM) capabilities, four to 10 full-time analysts, an eight-by-five (8×5) Security Operations Center (SOC), and 101–500 daily meaningful alerts
• Large enterprise with mature Security Information and Event Management (SIEM) capability, more than 10 full-time analysts, a twenty-four-by-seven (24×7) Security Operations Center (SOC), and more than 500 daily meaningful alerts

 

Who are the target audiences for Chronicle Security Operations (SecOps)?

 

Select one that applies, and then click Submit.

• Level 1 and 2 Analysts only
• Chief Information Security Officer (CISO), Security Operations Center (SOC) Manager, Security Engineer, Cloud Stakeholder
• Practitioners only

 

Identify the key capabilities of Chronicle Security Operations.

 

Select one that applies, and then click Submit.

• Collection, detection, investigation, and response
• Automation, detection, and AI Security Workbench
• Collection, investigation, alert monitoring