PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER · Question #39
You are tasked with building a workflow in Google Security Operations (SecOps) SOAR. The documentation you are using requires a logical split that has eight different possible paths. You need to…
The correct answer is C. Create a playbook that uses a flow condition. Add four more branches to have a total of five. The most efficient way is to use flow conditions in a single playbook. Since one flow condition supports up to five branches (four defined and one "Else"), you can cascade conditions by placing another flow condition on the "Else" branch. This allows you to logically split the…
Question
You are tasked with building a workflow in Google Security Operations (SecOps) SOAR. The documentation you are using requires a logical split that has eight different possible paths. You need to break the workflow into eight separate workflows using an automatic and efficient approach. What should you do?
Options
- ACreate eight playbooks for each workflow. Configure the triggered playbook to end on an
- BCreate eight playbooks for each workflow. Create a job that identifies your recently opened cases,
- CCreate a playbook that uses a flow condition. Add four more branches to have a total of five
- DCreate a playbook that uses a Multi-Choice Question flow and a second Multi-Choice Question
How the community answered
(45 responses)- A13% (6)
- B7% (3)
- C78% (35)
- D2% (1)
Explanation
The most efficient way is to use flow conditions in a single playbook. Since one flow condition supports up to five branches (four defined and one "Else"), you can cascade conditions by placing another flow condition on the "Else" branch. This allows you to logically split the workflow into eight distinct paths in an automated manner, without requiring multiple playbooks or manual
Topics
Community Discussion
No community discussion yet for this question.