nerdexam
Google

PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER · Question #69

You are configuring a new integration in Google Security Operations (SecOps) to perform enrichment actions in playbooks. This enrichment technology is located in a private data center that does not…

The correct answer is D. Create a remote agent in the private data center. Configure an instance of the integration to run. The correct approach is to create a remote agent in the private data center and configure the integration to run on that agent. Remote agents can initiate outbound connections to Google SecOps, enabling playbook enrichment without requiring inbound network access, which adheres…

Configuring the environment

Question

You are configuring a new integration in Google Security Operations (SecOps) to perform enrichment actions in playbooks. This enrichment technology is located in a private data center that does not allow inbound network connections. You need to connect your Google SecOps instance to the integration. What should you do?

Options

  • ACreate a forwarder in the private data center. Configure an instance of the integration to run on
  • BQuery the enrichment source in the private data center and upload the results to the case wall in
  • CCreate a network route in Google Cloud to the private data center.
  • DCreate a remote agent in the private data center. Configure an instance of the integration to run

How the community answered

(24 responses)
  • A
    4% (1)
  • B
    4% (1)
  • C
    13% (3)
  • D
    79% (19)

Explanation

The correct approach is to create a remote agent in the private data center and configure the integration to run on that agent. Remote agents can initiate outbound connections to Google SecOps, enabling playbook enrichment without requiring inbound network access, which adheres to the private data center's network restrictions.

Topics

#remote agent#private data center connectivity#SOAR integration#inbound-restricted network

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER Practice