PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER · Question #95
You are reviewing the results of a UDM search in Google Security Operations (SecOps). The UDM fields shown in the default view are not relevant to your search. You want to be able to quickly view the
The correct answer is D. Use the columns feature to select or remove columns that are relevant to your analysis.. The quickest and most effective way to tailor the UDM search results in Google SecOps is to use the columns feature. This lets you add or remove specific UDM fields so that only the data relevant to your investigation is displayed, without exporting or creating dashboards.
Question
You are reviewing the results of a UDM search in Google Security Operations (SecOps). The UDM fields shown in the default view are not relevant to your search. You want to be able to quickly view the relevant data for your analysis. What should you do?
Options
- ADownload the search results as a CSV file, and manipulate the data to display relevant data in a
- BCreate a Google SecOps SIEM dashboard based on the search you have run, and visualize the
- CSelect the events of interest, and choose the relevant UDM fields from the event view using the
- DUse the columns feature to select or remove columns that are relevant to your analysis.
How the community answered
(21 responses)- A5% (1)
- B5% (1)
- C14% (3)
- D76% (16)
Explanation
The quickest and most effective way to tailor the UDM search results in Google SecOps is to use the columns feature. This lets you add or remove specific UDM fields so that only the data relevant to your investigation is displayed, without exporting or creating dashboards.
Topics
Community Discussion
No community discussion yet for this question.