Professional Security Operations EngineerDemo

By Google · Question Mode

QuestionQ112

Data management

Your organization is a Google Security Operations (SecOps) customer. The compliance team requires a weekly export of case resolutions and SLA metrics for high- and critical-severity cases from the past week. The compliance team's post-processing scripts require the data to be formatted as tabular CSV files, zipped, and delivered to their email each Monday morning. What should you do?

  • A Generate a report in SOAR Reports, and schedule delivery of the report.
  • B Use statistics in search, and configure a Google SecOps SOAR job to format and send the report.
  • C Build an Advanced Report in SOAR Reports, and schedule delivery of the report.
  • D Build a detection rule with outcomes, and configure a Google SecOps SOAR job to format and send the report.
Explanation

SOAR Reports can be scheduled, but their documented export formats are PDF and Word rather than CSV. Search statistics can produce filtered, tabular case data, and a scheduled Google SecOps SOAR job can automate the required CSV formatting, ZIP packaging, and Monday email delivery. Advanced SOAR reporting supports analysis of case priority, closure, and SLA fields, but the required custom packaging and delivery workflow calls for a job.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!