Câu 15: Google Cloud Professional Security Operations Engineer

Your organization has mission-critical production Compute Engine VMS that you monitor daily. While performing a UDM search in Google Security Operations (SecOps), you discover several outbound network connections from one of the production VMs to an unfamiliar external IP address occurring over the last 48 hours. You need to use Google SecOps to quickly gather more context and assess the reputation of the external IP address. What should you do?

1. A. Examine the Google SecOps Asset view details for the production VM.
2. B. Create a new detection rule to alert on future traffic from the external IP address.
3. C. Search for the external IP address in the Alerts & IOCs page in Google SecOps. — đáp án hiện tại
4. D. Perform a UDM search to identify the specific user account that was logged into the production VM when the connections occurred.