Câu 18: Google Cloud Professional Security Operations Engineer

Your organization uses Google Security Operations (SecOps) for security analysis and investigation. Your organization has decided that all security cases related to Data Loss Prevention (DLP) events must be categorized with a defined root cause specific to one of five DLP event types when the case is closed in Google SecOps. How should you achieve this?

1. A. Customize the Close Case dialog and add the five DLP event types as root cause options. — đáp án hiện tại
2. B. Customize the Case Name format to include the DLP event type.
3. C. Create a Google SecOps SOAR playbook that automatically assigns case tags where each tag contains the unique definition of one of the five DLP event types.
4. D. Create case tags in Google SecOps SOAR where each tag contains a unique definition of each of the five DLP event types, and have analysts assign them to cases manually.