Exam Security-Operations-Engineer Topic 4 Question 26 Discussion

Actual exam question for Google's Security-Operations-Engineer exam
Question #: 26
Topic #: 4
Your Google Security Operations (SecOps) SOAR integration with Security Command Center (SCC) uses a service account that currently has read access to the findings at the organization level. Google SecOps SOAR successfully reads SCC finding data, but actions attempting to update the finding states consistently fail with a permission denied error. You need to resolve this error while following the principle of least privilege. What should you do?

Suggested Answer: B Vote an answer

To allow Google SecOps SOAR to update SCC findings while adhering to least privilege, you should grant the service account the roles/securitycenter.findingsEditor IAM role at the organization level. This role permits modifying the state of findings without granting broader administrative privileges.

by Basil at Sep 02, 2026, 07:28 PM

Limited Time Offer

15%

Off

Get Premium Security-Operations-Engineer Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10