Exam Security-Operations-Engineer Topic 3 Question 8 Discussion

Actual exam question for Google's Security-Operations-Engineer exam
Question #: 8
Topic #: 3
You are working with your company's analyst team to automate the investigation of phishing alerts ingested directly into Google Security Operations (SecOps) SOAR from an email inbox.
The analyst team currently uses a SIEM query to search for related information. You need to design a solution to automatically include the query results in the Google SecOps case without writing any new code. What should you do?

Suggested Answer: D Vote an answer

The simplest and most effective way - without writing new code - is to add an action to the playbook that runs the SIEM query and returns the results. This integrates SIEM query results automatically into each phishing case, supporting streamlined analyst investigations.

by Donna at Oct 14, 2026, 06:41 AM

Limited Time Offer

15%

Off

Get Premium Security-Operations-Engineer Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10