CAS-005 · Question #423
A new, online file hosting service is being offered. The service has the following security requirements: - Threats to customer data integrity and availability should be remediated first. - The…
The correct answer is C. Implementing a SOAR solution to address known threats. A SOAR platform can automate the remediation of integrity- and availability-threats (e.g., known malware or misconfigurations) in real time without blocking user access, scale dynamically with your environment, and surface only high-risk incidents for analyst review, perfectly…
Question
A new, online file hosting service is being offered. The service has the following security requirements:
- Threats to customer data integrity and availability should be
remediated first.
- The environment should be dynamic to match increasing customer
demands.
- The solution should not interfere with customers’ ability to access
their data at anytime.
- Security analysts should focus on high-risk items.
Which of the following would best satisfy the requirements?
Options
- AExpanding the use of IPS and NGFW devices throughout the environment
- BIncreasing the number of analysts to identify risks that need remediation
- CImplementing a SOAR solution to address known threats
- DIntegrating enterprise threat feeds in the existing SIEM
How the community answered
(29 responses)- A7% (2)
- B14% (4)
- C76% (22)
- D3% (1)
Explanation
A SOAR platform can automate the remediation of integrity- and availability-threats (e.g., known malware or misconfigurations) in real time without blocking user access, scale dynamically with your environment, and surface only high-risk incidents for analyst review, perfectly aligning with the stated requirements.
Community Discussion
No community discussion yet for this question.