Google
PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER · Question #60
PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER Question #60: Real Exam Question with Answer & Explanation
Sign in or unlock PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER to reveal the answer and full explanation for question #60. The question stem and answer options stay visible for context.
Question
Your Google Security Operations (SecOps) SOAR integration with Security Command Center (SCC) uses a service account that currently has read access to the findings at the organization level. Google SecOps SOAR successfully reads SCC finding data, but actions attempting to update the finding states consistently fail with a permission denied error. You need to resolve this error while following the principle of least privilege. What should you do?
Options
- AGrant the service account the roles/securitycenter.findingsBulkMuteEditor IAM role at the
- BGrant the service account the roles/securitycenter.findingsEditor IAM role at the organization
- CGrant the service account the roles/iam.serviceAccountUser IAM role to itself.
- DRegenerate the service account key, and update the credentials in Google SecOps SOAR.
Unlock PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER to see the answer
You've previewed enough free PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER questions. Unlock PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.