Security Operations第 82 / 100 题
Which automation approach uses playbooks to coordinate tools and streamline security operations tasks?
a.EDR
b.SIEM
c.DLP
d.SOAR
解析
Security orchestration, automation, and response (SOAR) uses playbooks to automate and coordinate actions across security tools. It accelerates repetitive response tasks and reduces analyst workload. It often works alongside a SIEM to act on alerts.
免费刷完整 100 道题库 — 无需注册。
同考点相关题目
- Which endpoint solution continuously records activity and enables investigation and automated response to threats on hosts?
- Which practice ensures logs cannot be tampered with by centralizing them on a protected, write-once server?
- A discussion-based session where a team walks through their response to a hypothetical incident is called a:
- Which principle requires that two people perform a sensitive action together to prevent fraud?
- Rotating employees through different roles helps detect fraud and reduce dependence on any one person. This control is:
- Which secure disposal method makes data on a drive unrecoverable by destroying the media physically?