Certified Incident Handler (CIH) Practice Ecam

Which of the following does not assist incident responders in eradicating Google Cloud security incidents?

1. Regularly update security policies

2. Disable account activity alerts

3. Conduct vulnerability assessments

4. Implement automated monitoring tools

The correct answer is: Disable account activity alerts

Disabling account activity alerts would not assist incident responders in eradicating security incidents on Google Cloud. In fact, account activity alerts are crucial for identifying unusual or suspicious behavior, allowing responders to act quickly to mitigate potential threats. These alerts can provide real-time insights into account usage and can trigger responses to prevent incidents from escalating. In contrast, regularly updating security policies, conducting vulnerability assessments, and implementing automated monitoring tools all contribute positively to incident response efforts. Regularly updating security policies ensures that incidents are managed according to the latest best practices and regulatory requirements. Conducting vulnerability assessments helps in identifying weaknesses that could be exploited by attackers, allowing organizations to address those vulnerabilities proactively. Automated monitoring tools enhance the ability to detect and respond to incidents in real-time, providing valuable data and alerts that are essential for an effective incident response strategy.