PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER · Question #90
You are responsible for managing threat intelligence and IOC lists in your organization. You have compiled a list of IOCs from recent incidents. You want to quickly and efficiently share the IOCs with
The correct answer is A. Create a list in Google Security Operations (SecOps), and grant the required access to the other. The most efficient and collaborative approach is to create a reference list in Google SecOps and grant access to the other teams. This allows teams to directly use the IOCs in detection rules, playbooks, and investigations without manual file transfers, ensuring the data is consi
Question
You are responsible for managing threat intelligence and IOC lists in your organization. You have compiled a list of IOCs from recent incidents. You want to quickly and efficiently share the IOCs with other teams for collaboration and integration into their operational processes. What should you do?
Options
- ACreate a list in Google Security Operations (SecOps), and grant the required access to the other
- BExport the IOCs from Google Threat Intelligence in CSV or JSON format, and email the file to the
- CAdd the IOCs to a collection in Google Threat Intelligence, and share the collection with the other
- DCreate a new threat graph in Google Threat Intelligence, and share the graph with the other
How the community answered
(48 responses)- A83% (40)
- B6% (3)
- C2% (1)
- D8% (4)
Explanation
The most efficient and collaborative approach is to create a reference list in Google SecOps and grant access to the other teams. This allows teams to directly use the IOCs in detection rules, playbooks, and investigations without manual file transfers, ensuring the data is consistently available and up-to-date across operational processes.
Topics
Community Discussion
No community discussion yet for this question.