Exam Security-Operations-Engineer Topic 2 Question 86 Discussion

Actual exam question for Google's Security-Operations-Engineer exam
Question #: 86
Topic #: 2
You are a SOC manager guiding an implementation of your existing incident response plan (IRP) into Google Security Operations (SecOps). You need to capture time duration data for each of the case stages. You want your solution to minimize maintenance overhead. What should you do?

Suggested Answer: C Vote an answer

The correct approach is to configure Case Stages in Google SecOps SOAR settings and use the Change Case Stage action in playbooks. This automatically captures time metrics whenever a case stage changes, aligning with your incident response plan while minimizing maintenance overhead, since timing data is recorded natively without requiring custom jobs or dashboards.

by Harvey at Feb 19, 2026, 11:16 PM

Limited Time Offer

15%

Off

Get Premium Security-Operations-Engineer Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10