PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER · Question #59
You have identified a common malware variant on a potentially infected computer. You need to find reliable IOCs and malware behaviors as quickly as possible to confirm whether the computer is…
The correct answer is D. Search for the malware hash in Google Threat Intelligence, and review the results. The fastest and most reliable method is to search for the malware hash in Google Threat Intelligence. GTI provides curated, up-to-date IOCs and documented malware behaviors, enabling you to confirm the infection quickly and extend the search across other computers in your…
Question
You have identified a common malware variant on a potentially infected computer. You need to find reliable IOCs and malware behaviors as quickly as possible to confirm whether the computer is infected and search for signs of infection on other computers. What should you do?
Options
- ACreate a Compute Engine VM, and perform dynamic and static malware analysis.
- BPerform a UDM search for the file checksum in Google Security Operations (SecOps). Review
- CRun a Google Web Search for the malware hash, and review the results.
- DSearch for the malware hash in Google Threat Intelligence, and review the results.
How the community answered
(63 responses)- A3% (2)
- B8% (5)
- C13% (8)
- D76% (48)
Explanation
The fastest and most reliable method is to search for the malware hash in Google Threat Intelligence. GTI provides curated, up-to-date IOCs and documented malware behaviors, enabling you to confirm the infection quickly and extend the search across other computers in your environment.
Topics
Community Discussion
No community discussion yet for this question.