Professional Security Operations Engineer

By Google · Question Mode

QuestionQ30

Platform operations

Your Google Security Operations (SecOps) case queue includes a case containing IP address entities. You need to establish whether the entities are internal or external assets and ensure that internal IP address entities are marked appropriately when ingested into Google SecOps SOAR. What should you do?

Explanation

The Environment Networks configuration defines the organization’s internal CIDR ranges. Google SecOps SOAR uses those ranges during entity ingestion to classify matching IP address entities as internal.

Community Discussion

No comments yet. Be the first to start the discussion!