Google Professional Security Operations Engineer Exam - Topic 2 Question 23 Discussion

Question

You are a security operations engineer in an enterprise that uses Google Security Operations (SecOps). You need to improve your detection coverage and reduce the false positive detection ratio as quickly as possible.

What should you do?

Kimberely · Accepted Answer

A) Enable curated detections to identify threats.

Kimberely · Answer

B) Ingest data from your threat intelligence platform (TIP) into Google SecOps.

Kimberely · Answer

C) Develop YARA-L detection rules that focus on threat intelligence.

Kimberely · Answer

D) Design YARA-L detection rules based on Google SecOps Marketplace use cases.