Google Cloud Professional Security Operations Engineer PSOE — Question 36

The correct answer is D. Option D: Use Google SecOps SIEM Search to query against the grouped ip field, and use the enriched field from the suspicious events to identify related activity.

Explanation

Google Security Operations provides cloud-scale SIEM, threat detection, investigation, and SOAR capabilities for security teams. This option keeps traffic private / properly secured as required. The other options (A, B, C) are less suitable because they add operational overhead, cost, or complexity, or they do not fully satisfy the stated requirement.