Which statement about Google Cloud Threat Intelligence feeds in rules is correct?

ATor Exit Nodes is documented as a timeless data source

BBenign Binaries always matches only the historical snapshot at the event time

CTor Exit Nodes is a timed data source, while Benign Binaries is documented as timeless

DAll GCTI feeds behave identically with respect to time matching

Related Questions

In YARA-L 2.0, which section groups events over a time window?...

easy

What is the benefit of converting a successful Google SecOps search into a YARA-L rule?...

easy

A team wants a low-prevalence hunting rule to act as a secondary indicator during investigations ins...

medium

To improve the usefulness of the alert graph for a custom YARA-L rule, which section should include ...

medium

Before enabling a new rule in production, an engineer wants to test it against older telemetry. Whic...

medium

View all Detection engineering questions

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.