A security operations team needs to track the effectiveness of their detection engineering program. They want a single dashboard that shows the volume of detections created per week, the median time-to-triage for alerts, and the percentage of alerts that were escalated to incidents. The team uses Google SecOps SIEM and wants to share this with management who are not familiar with raw log formats. What should the analyst configure in Google SecOps?

Use the built-in 'SOAR Metrics' dashboard and filter it to show only detection-related metrics.

Create a new parsing configuration to normalize the alert data into a custom format before building the dashboard.

Create a custom dashboard using the built-in analytics widgets that query UDM events, and add scorecard charts for the three metrics.

Export the raw UDM events to BigQuery and build a separate Looker Studio report to calculate the metrics from the raw data.

A SOC manager needs to provide a weekly summary of the top 10 most detected malware families to the CISO. The summary must be generated automatically every Monday morning and sent via email. The team uses Google SecOps. What is the most efficient way to fulfill this requirement?

Create a dashboard in Google SecOps and share the link with the CISO, who can check it every Monday.

Manually query the SIEM every Monday and copy the results into a Google Doc to email to the CISO.

Set up a Looker Studio report and email the PDF version to the CISO on a schedule.

Create a custom report in Google SecOps, configure it to run on a schedule, and set up email delivery for the report.

In Looker Studio, which of the following is a primary way to customize a dashboard to meet specific security monitoring needs?

Changing the background color of the dashboard

Adding filters that allow users to interact with the data

Increasing the number of pages in the report

In Google SecOps SIEM, which of the following is a customization option for a scheduled report?

Modifying the report's file size

Changing the report's color scheme

Adding a watermark to the report

Setting the report to run at a specific time daily

A security team wants to create a dashboard that provides a single view of their organization's threat landscape. They want to see the top attacker IP addresses, the most targeted ports, and the geographic distribution of attacks. The data is available in Google SecOps SIEM as UDM events. What is the most effective way to design this dashboard?

Create a Looker Studio report and connect it to the UDM events to build the visualizations.

Use a single widget with a complex query that attempts to display all three data dimensions in one chart.

Create a single dashboard with multiple widgets, each using a different query to visualize one of the three data dimensions.

Create three separate dashboards and link them together so users can navigate between them.

Google CloudProfessional Security Operations Engineer

Domain 6Objective 1

6.1 Developing and Maintaining Dashboards and Reports to Provide Insights PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER Practice Questions (Page 3)

Part of the Observability domain, which accounts for 10% of the PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER exam.

23questions here

5free pages

6concepts

10%of the exam

Questions 11–15

11application · medium
A security operations team needs to track the effectiveness of their detection engineering program. They want a single dashboard that shows the volume of detections created per week, the median time-to-triage for alerts, and the percentage of alerts that were escalated to incidents. The team uses Google SecOps SIEM and wants to share this with management who are not familiar with raw log formats. What should the analyst configure in Google SecOps?
Select an answer first
12application · medium
A SOC manager needs to provide a weekly summary of the top 10 most detected malware families to the CISO. The summary must be generated automatically every Monday morning and sent via email. The team uses Google SecOps. What is the most efficient way to fulfill this requirement?
Select an answer first
13foundation · easy
In Looker Studio, which of the following is a primary way to customize a dashboard to meet specific security monitoring needs?
Select an answer first
14foundation · easy
In Google SecOps SIEM, which of the following is a customization option for a scheduled report?
Select an answer first
15application · medium
A security team wants to create a dashboard that provides a single view of their organization's threat landscape. They want to see the top attacker IP addresses, the most targeted ports, and the geographic distribution of attacks. The data is available in Google SecOps SIEM as UDM events. What is the most effective way to design this dashboard?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER” is a trademark of its owner, used for identification only.

6.1 Developing and Maintaining Dashboards and Reports to Provide Insights PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER Practice Questions (Page 3)

Questions 11–15

A SOC manager needs to provide a weekly summary of the top 10 most detected malware families to the CISO. The summary must be generated automatically every Monday morning and sent via email. The team uses Google SecOps. What is the most efficient way to fulfill this requirement?

In Looker Studio, which of the following is a primary way to customize a dashboard to meet specific security monitoring needs?

In Google SecOps SIEM, which of the following is a customization option for a scheduled report?

Keep studying — Observability