Professional Security Operations EngineerDemo

By Google · Question Mode

QuestionQ57

Incident response

You are investigating an alert in Google Security Operations (SecOps). You want to see prior enrichment attributes and relevant historical cases for an entity with the fewest steps. What should you do?

  • A Initiate a SIEM Search to query the entity.
  • B Initiate a SOAR Search to query the entity.
  • C Select View Details for the entity in the Entity Highlights widget.
  • D Select the entity identifier in the Entity Highlights widget to open Entity Explorer.
Explanation

Entity Explorer provides detailed contextual and enrichment information for an entity, including information enriched from associated cases, and displays all cases associated with that entity. Selecting the entity name in Entity Highlights opens Entity Explorer directly. Perform entity selection

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!