Prep and try our GCP-SOE-B valid and latest training questions & answers

Google GCP-SOE-B Exam Overview:

Google GCP-SOE-B Exam Syllabus Topics:

Google Security Operations Engineer (Beta) Sample Questions:

1. Your organization recently implemented Google Security Operations (SecOps). You need to create a solution that allows the security team to monitor data ingestion into Google SecOps in real time. You also need to configure a solution that automatically sends a notification if one of the data sources stops ingesting dat a. You need to minimize the cost of these configurations.
What should you do?

A) Use Google SecOps SIEM dashboards to visualize the data ingestion, and configure an alerting policy in Cloud Monitoring to send a notification in case of failure.
B) Create Looker dashboards to visualize the data ingestion, and configure an alerting policy in Looker to send a notification in case of failure.
C) Create Looker dashboards to visualize the data ingestion, and configure an alerting policy in Cloud Monitoring to send a notification in case of failure.
D) Use Google SecOps SIEM dashboards to visualize the data ingestion and configure an alerting policy in Cloud Logging to send a notification in case of failure.

2. You are responsible for evaluating the level of effort required to integrate a new third-party endpoint detection tool with Google Security Operations (SecOps). Your organization's leadership wants to minimize customization for the new tool for faster deployment. You need to verify that the Google SecOps SOAR and SIEM support the expected workflows for the new third-party tool.
You must recommend a tool to your leadership team as quickly as possible. What should you do? (Choose two.)

A) Develop a custom integration that uses Python scripts and Cloud Run functions to forward logs and orchestrate actions between the third-party tool and Google SecOps.
B) Configure a Pub/Sub topic to ingest raw logs from the third-party tool and build custom YARA-L rules in Google SecOps to extract relevant security events.
C) Identify the tool in the Google SecOps Marketplace and verify support for the necessary actions in the workflow.
D) Review the documentation to identify if default parsers exist for the tool, and determine whether the logs are supported and able to be ingested.
E) Review the architecture of the tool to identify the cloud provider that hosts the tool.

3. A phishing campaign successfully convinces users to grant OAuth permissions to a malicious third-party application. Which control failure MOST likely allowed this?

A) Weak endpoint protection
B) Missing antivirus signatures
C) Missing email sandboxing
D) Lack of monitoring and restriction on OAuth consent grants

4. You work for a telecommunications company that wants to monitor their multi-region 5G network logs in Google Security Operations (SecOps). The logs are currently only available on- premises and are stored in a standalone network-attached storage (NAS) located in four different regions.
You need to ingest the logs into Google SecOps and tag each NAS as a specific log source to avoid IP address aliasing. What should you do?

A) Configure a Bindplane agent that collects Syslog from each log's location, and configure a namespace for each log source.
B) Configure feed management to pull data from each log's location, and configure a namespace for each log source.
C) Configure feed management to pull data from each log's location, and configure an ingestion label for each log source.
D) Configure a Bindplane agent that collects Syslog from each log's location and configure an ingestion label for each log source.

5. You are responsible for selecting and prioritizing potential sources of data to integrate with Google Security Operations (SecOps). Your company has recently started using several Google Cloud services to increase security in its Google Cloud organization. You need to determine which logs should be ingested into Google SecOps to reduce the effort required to write detections. What should you do?

A) Deploy a Bindplane agent to ingest event logs from Compute Engine VMs that provide endpoint visibility.
B) Use Google Threat Intelligence to gain insight about threat group behavior and support threat hunting activities.
C) Integrate Security Command Center (SCC) into Google SecOps to ingest logs originating from the Google Cloud services.
D) Ingest Google Cloud Armor logs by using Cloud Logging.

Solutions: