Examkin

Soru

Zorluk: KolaySecurity Automation and Orchestration (SOAR)

An IT security operations team wants to streamline incident triage by automatically connecting threat intelligence feeds with security monitoring tools and executing pre-defined response actions across different platforms. Which technology should the team implement to achieve this orchestration and automation?

  1. Security Orchestration, Automation, and Response (SOAR)Cevap
  2. B
    Endpoint Detection and Response (EDR)
  3. C
    Identity and Access Management (IAM)
  4. D
    Unconditioned server auto-isolation scripts

Cevap

Security Orchestration, Automation, and Response (SOAR)
Security Orchestration, Automation, and Response (SOAR) integrates disparate security systems and software, allowing organizations to execute automated playbooks that enrich alerts and streamline response actions across the enterprise.

Adım Adım Çözüm

1
Analyze the operational requirement given in the scenario.
The requirement calls for integrating disparate security tools and automating threat triage using pre-defined response actions.
Combining disparate tools into unified workflows requires an orchestration layer.
2
Compare the core functions of security solutions against the requirement.
SOAR connects threat feeds and security tools to run automated response playbooks, fulfilling all requirements.
SOAR is specifically designed for cross-platform security automation and workflow orchestration.

Anahtar Kavram

Security Automation and Orchestration (SOAR)
Bu soruyu puanla

Konular

Security Automation and Orchestration (SOAR)

Bu konudan daha fazla soru