nerdexam
Google

PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER · Question #94

Your organization is a Google Security Operations (SecOps) customer. The compliance team requires a weekly export of case resolutions and SLA metrics of high and critical severity cases over the past

The correct answer is B. Use statistics in search, and configure a Google SecOps SOAR job to format and send the report.. Use statistics in search to produce the required tabular metrics, then run a scheduled SOAR job to export as CSV, zip the file, and email it each Monday - meeting the exact format and delivery requirements with minimal manual effort.

SOAR Automation and Case Management

Question

Your organization is a Google Security Operations (SecOps) customer. The compliance team requires a weekly export of case resolutions and SLA metrics of high and critical severity cases over the past week. The compliance team's post-processing scripts require this data to be formatted as tabular data in CSV files, zipped, and delivered to their email each Monday morning. What should you do?

Options

  • AGenerate a report in SOAR Reports, and schedule delivery of the report.
  • BUse statistics in search, and configure a Google SecOps SOAR job to format and send the report.
  • CBuild an Advanced Report in SOAR Reports, and schedule delivery of the report.
  • DBuild a detection rule with outcomes, and configure a Google SecOps SOAR job to format and

How the community answered

(40 responses)
  • A
    13% (5)
  • B
    75% (30)
  • C
    10% (4)
  • D
    3% (1)

Explanation

Use statistics in search to produce the required tabular metrics, then run a scheduled SOAR job to export as CSV, zip the file, and email it each Monday - meeting the exact format and delivery requirements with minimal manual effort.

Topics

#SOAR reporting#SLA metrics#scheduled jobs#CSV export

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER Practice