Question 4
(Topic 1)
You are helping a new Google Security Operations (SecOps) customer configure access for their SOC team. The Google SecOps administrators currently have access to the instance. The customer is reporting that new Google SecOps users are not getting authorized to access the instance, but they are able to authenticate to the third-party identity provider (IdP). How should you fix the issue? (Choose two.)
Select an option, then click Submit answer.
- ○ Link Google SecOps to a Google Cloud project with the Chronicle API.
- ○ Integrate Google SecOps with the third-party IdP using Workforce Identity Federation.
- ○ Grant the appropriate data access scope to the SOC team's IdP group in IAM.
- ○ Grant the roles/chronicle.viewer role to the SOC team's IdP group in IAM.
- ○ Grant the Basic permission to the appropriate IdP groups in the Google SecOps SOAR Advanced Settings.
