Câu 37: Google Cloud Professional Security Operations Engineer

You received an alert from Container Threat Detection that an added binary has been executed in a business critical workload. You need to investigate and respond to this incident. What should you do? (Choose two.)

1. A. Notify the workload owner. Follow the response playbook, and ask the threat hunting team to identify the root cause of the incident. — đáp án hiện tại
2. B. Review the finding, investigate the pod and related resources, and research the related attack and response methods. — đáp án hiện tại
3. C. Review the finding, quarantine the cluster containing the running pod, and delete the running pod to prevent further compromise.
4. D. Silence the alert in the Security Command Center (SCC) console, as the alert is a low severity finding.
5. E. Keep the cluster and pod running, and investigate the behavior to determine whether the activity is malicious.