PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER · Question #27
Your company's analyst team uses a playbook to make necessary changes to external systems that are integrated with the Google Security Operations (SecOps) platform. You need to automate the task to…
The correct answer is C. Create a Cron Scheduled Connector for this use case Configure a playbook trigger to match the. The best solution is to create a Cron Scheduled Connector in Google SecOps and configure a playbook trigger to execute based on the cases generated by the connector. This allows the playbook to run automatically at a specific daily time with minimal maintenance overhead…
Question
Your company's analyst team uses a playbook to make necessary changes to external systems that are integrated with the Google Security Operations (SecOps) platform. You need to automate the task to run once every day at a specific time. You want your solution to minimize maintenance overhead. What should you do?
Options
- AWrite a custom Google SecOps SOAR job in the IDE using the code from the existing playbook
- BCreate a Google SecOps SOAR request and a playbook trigger to match the request from the
- CCreate a Cron Scheduled Connector for this use case Configure a playbook trigger to match the
- DUse a VM to host a script that runs a playbook via an API call.
How the community answered
(16 responses)- A6% (1)
- B13% (2)
- C75% (12)
- D6% (1)
Explanation
The best solution is to create a Cron Scheduled Connector in Google SecOps and configure a playbook trigger to execute based on the cases generated by the connector. This allows the playbook to run automatically at a specific daily time with minimal maintenance overhead, leveraging built-in scheduling and orchestration rather than requiring custom jobs or external
Topics
Community Discussion
No community discussion yet for this question.