Professional Security Operations Engineer

By Google · Question Mode

QuestionQ26

Incident response

Your organization uses Google Security Operations (SecOps) for security analysis and investigation. It has decided that every security case related to Data Loss Prevention (DLP) events must be categorized with a defined root cause for one of five DLP event types when the case is closed in Google SecOps. How should you accomplish this?

Explanation

Google SecOps SOAR lets administrators customize the Close Case dialog and add root causes to the Root Cause menu. Defining the five DLP event types as root-cause options ensures analysts select the required standardized root cause during case closure.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!