nerdexam
Google

PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER · Question #141

After resolving a confirmed security incident in Google Cloud, what action provides the GREATEST long-term security improvement?

The correct answer is C. Updating detections, playbooks, and IAM controls based on lessons learned. Improving detections and controls ensures the organization is better protected against similar Exam Questions, Study Guides, Practice Tests. Lead the way to help you pass any IT Certification exams, 100% Pass Guaranteed or Full Refund. Especially Cisco, Microsoft, CompTIA…

Incident Response and Post-Incident Review

Question

After resolving a confirmed security incident in Google Cloud, what action provides the GREATEST long-term security improvement?

Options

  • AClosing all related alerts
  • BIncreasing log retention
  • CUpdating detections, playbooks, and IAM controls based on lessons learned
  • DAdding more analysts

How the community answered

(31 responses)
  • A
    6% (2)
  • B
    13% (4)
  • C
    77% (24)
  • D
    3% (1)

Explanation

Improving detections and controls ensures the organization is better protected against similar Exam Questions, Study Guides, Practice Tests. Lead the way to help you pass any IT Certification exams, 100% Pass Guaranteed or Full Refund. Especially Cisco, Microsoft, CompTIA, Citrix, EMC, HP, Oracle, VMware, Juniper, Check Point, LPI, Nortel, EXIN and so on. Our Slogan: First Test, First Pass. Help you to pass any IT Certification exams at the first try. You can reach us at any of the email addresses listed below. Any problems about IT certification or our products, you could rely upon us, we will give you satisfactory answers in 24 hours.

Topics

#post-incident review#lessons learned#detection tuning#incident response lifecycle

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER Practice