Examkin

Question

Difficulty: EasySecurity Automation and Orchestration (SOAR)

An IT security operations team wants to streamline incident triage by automatically connecting threat intelligence feeds with security monitoring tools and executing pre-defined response actions across different platforms. Which technology should the team implement to achieve this orchestration and automation?

  1. Security Orchestration, Automation, and Response (SOAR)Answer
  2. B
    Endpoint Detection and Response (EDR)
  3. C
    Identity and Access Management (IAM)
  4. D
    Unconditioned server auto-isolation scripts

Answer

Security Orchestration, Automation, and Response (SOAR)
Security Orchestration, Automation, and Response (SOAR) integrates disparate security systems and software, allowing organizations to execute automated playbooks that enrich alerts and streamline response actions across the enterprise.

Step-by-Step Solution

1
Analyze the operational requirement given in the scenario.
The requirement calls for integrating disparate security tools and automating threat triage using pre-defined response actions.
Combining disparate tools into unified workflows requires an orchestration layer.
2
Compare the core functions of security solutions against the requirement.
SOAR connects threat feeds and security tools to run automated response playbooks, fulfilling all requirements.
SOAR is specifically designed for cross-platform security automation and workflow orchestration.

Key Concept

Security Automation and Orchestration (SOAR)
Rate this question

Topics

Security Automation and Orchestration (SOAR)

More questions from this topic