Google Cloud Professional Security Operations Engineer PSOE — Question 24

The correct answer is A. Option A: Build a playbook that automatically ingests reported phishing emails, enriches entities with threat intelligence, determines the impact and assigns the case for review.

Explanation

A SOAR playbook automates enrichment, triage, containment, notification, and case-handling steps. This option keeps traffic private / properly secured as required. The other options (B, C, D) are less suitable because they add operational overhead, cost, or complexity, or they do not fully satisfy the stated requirement.