Exam Security-Operations-Engineer Topic 1 Question 117 Discussion

Actual exam question for Google's Security-Operations-Engineer exam
Question #: 117
Topic #: 1
Your organization has recently onboarded to Google Cloud with Security Command Center Enterprise (SCCE) and is now integrating it with your organization's SOC. You want to automate the response process and integrate with the existing SOW ticketing system. How should you implement this functionality?

Suggested Answer: C Vote an answer

The correct solution is to configure the SCC notifications feed to Pub/Sub and then use a Cloud Run function triggered by new events in the topic to call the SOC ticketing system's API. This automates ticket creation for findings, integrates seamlessly with the existing SOC process, and minimizes manual intervention while ensuring timely response.

by snecekcz at Aug 19, 2026, 11:12 AM

Limited Time Offer

15%

Off

Get Premium Security-Operations-Engineer Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
snecekcz
2026-08-19 11:13:23
Selected Answer: D
Sorry I meant D
upvoted 1 times
...
snecekcz
2026-08-19 11:12:27
Selected Answer: C
Security Operations is part of SCCE, so use SOAR automation and integration looks more logical.
upvoted 1 times
...
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10