Google Cloud Professional Security Operations Engineer PSOE — Question 16

The correct answer is B. Option B: Create eight playbooks for each workflow. Create a job that identifies your recently opened cases, applies the needed logic to determine which of the eight workflows should be attached, and attaches that workflow to t...

Explanation

A SOAR playbook automates enrichment, triage, containment, notification, and case-handling steps. This option keeps traffic private / properly secured as required. The other options (A, C, D) are less suitable because they add operational overhead, cost, or complexity, or they do not fully satisfy the stated requirement.