Performing threat hunting across environments.
5 practice questions under this official exam objective (PSOE) — each with the community-verified answer, a full option-by-option explanation and instant feedback.
Investigating C2 IP Traffic in Google SecOps SIEM
This question addresses how to effectively investigate Command and Control (C2) IP traffic using Google Security Operations SIEM Search. It establishe
Identifying Malicious User and Scope in Google SecOps
This question explores how to identify the malicious user and scope of compromise using Google Security Operations' Risk Analytics Behavioral Insights
Threat Hunting Low-Prevalence External Domains in Google SecOps
This PSOE threat-hunting scenario asks how to chase anomalous external-domain communications across firewall, proxy, DNS, and DHCP logs in Google SecO
Which First Action Confirms a Coordinated Login Attack in SecOps?
Google SecOps analysts facing suspicious logins across several accounts must pivot quickly to confirm whether the activity is a coordinated attack. Th
Detecting APT Activity with YARA-L Retrohunt in SecOps
When hunting for undetected APT activity in Google SecOps, hash-based detections are unreliable if process hashes are not consistently logged. A multi