Palo_Alto_Networks
CLOUDSEC-PRO · Question #19
A SOC playbook for incident prioritization should include: (Choose two)
The correct answer is A. Severity definitions B. Escalation workflows. Playbooks for prioritization should clearly define severity levels and provide workflows for escalating incidents to appropriate analysts, ensuring consistent and effective handling.
SOC Operations and Incident Management
Question
A SOC playbook for incident prioritization should include: (Choose two)
Options
- ASeverity definitions
- BEscalation workflows
- CPrinter driver updates
- DVacation schedules
How the community answered
(35 responses)- A83% (29)
- C11% (4)
- D6% (2)
Explanation
Playbooks for prioritization should clearly define severity levels and provide workflows for escalating incidents to appropriate analysts, ensuring consistent and effective handling.
Topics
#SOC playbook#severity definitions#escalation workflows#incident response
Community Discussion
No community discussion yet for this question.