Google
PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER · Question #109
PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER Question #109: Real Exam Question with Answer & Explanation
Sign in or unlock PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER to reveal the answer and full explanation for question #109. The question stem and answer options stay visible for context.
Question
You were recently hired as a SOC manager at an organization with an existing Google Security Operations (SecOps) implementation. You need to understand the current performance by calculating the mean time to respond or remediate (MTTR) for your cases. What should you do?
Options
- ACreate a multi-event detection rule to calculate the response metrics in the outcome section
- BCreate a dashboard table widget that displays the average case handling times by analyst, case
- CCreate a playbook block that can be re-used in all alert playbooks to write timestamps in the case
- DUse the playbooks' case stages to capture metrics for each stage change. Create a dashboard
Unlock PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER to see the answer
You've previewed enough free PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER questions. Unlock PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.