PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER · Question #68
You are managing the integration of Security Command Center (SCC) with downstream tooling. You need to pull security findings from SCC and import those findings as part of Google Security Operations…
The correct answer is B. Install the SCC integration from the Google SecOps Marketplace. Grant the SCC API the. The proper way to integrate SCC findings into Google SecOps SOAR is to install the SCC integration from the Google SecOps Marketplace. You must grant the SCC API the appropriate IAM roles so that Google SecOps can access the findings, and configure the integration using a…
Question
You are managing the integration of Security Command Center (SCC) with downstream tooling. You need to pull security findings from SCC and import those findings as part of Google Security Operations (SecOps) SOAR actions. You need to configure the connection between SCC and Google SecOps. What should you do?
Options
- AInstall the Google Rapid Response integration from the Google SecOps Marketplace. Gather
- BInstall the SCC integration from the Google SecOps Marketplace. Grant the SCC API the
- CCreate a Pub/Sub topic with a NotificationConfig object and a push subscription for the desired
- DCreate a Pub/Sub topic with a NotificationConfig object and a push subscription for the desired
How the community answered
(43 responses)- A16% (7)
- B72% (31)
- C5% (2)
- D7% (3)
Explanation
The proper way to integrate SCC findings into Google SecOps SOAR is to install the SCC integration from the Google SecOps Marketplace. You must grant the SCC API the appropriate IAM roles so that Google SecOps can access the findings, and configure the integration using a generated API key scoped to the SCC API. This approach provides a managed, secure, and supported method for importing SCC findings into SecOps actions.
Topics
Community Discussion
No community discussion yet for this question.