Professional Security Operations Engineer

Question

You are a security analyst at an organization that uses Google Security Operations (SecOps). You observe suspicious login attempts on several user accounts. You need to determine as quickly as possible whether these attempts are part of a coordinated attack. What action should you take first?

Explanation

The Risk Analytics dashboard provides a risk-based view of user entities and unusual behavior across the environment. Its 24-hour risk-calculation window is specifically useful for making brute-force attacks more apparent, enabling rapid comparison of the impacted users to identify a coordinated pattern.

Learn more

Professional Security Operations Engineer

AstroTutor

Notes

Readiness

QuestionQ15

Community Discussion