You need to build a workflow in Google Security Operations (SecOps) SOAR. The documentation being used calls for a logical split with eight possible paths. You must divide the workflow into eight separate workflows through an automatic, efficient method. What should you do?
A Create eight playbooks for each workflow. Configure the triggered playbook to end on an instruction action that tells the analyst to pick a workflow from the playbooks tab and attach that workflow to the alert. B Create eight playbooks for each workflow. Create a job that identifies your recently opened cases, applies the needed logic to determine which of the eight workflows should be attached, and attaches that workflow to the alert. C Create a playbook that uses a flow condition. Add four more branches to have a total of five branches and an "Else" branch. On the "Else" branch, include another flow condition. Include the remaining three branches with the logic required. D Create a playbook that uses a Multi-Choice Question flow and a second Multi-Choice Question for the additional answer choices. Add instructions describing which logic to use in the instruction or question fields. Have the analyst select the appropriate answer to move the flow into the right branch. Show Answer Answer Explanation Condition flows provide automated branching in Google SecOps SOAR by evaluating case data, placeholders, or preceding action results. A condition with five explicit branches can route all other outcomes to its Else branch, where a second condition evaluates the three remaining logical paths. This creates the required automated eight-way routing without requiring an analyst to make a selection.
Learn more
Community Discussion