CS0-003 · Question #119
Which of the following is an advantage of SOAR over SIEM?
The correct answer is B. SOAR reduces the amount of human intervention required. When comparing SOAR vs. SIEM, SIEM will only provide the alert. After that, it's up to the administrator to determine the path of an investigation (so, this means in my opinion more human intervation). A SOAR that automates investigation path workflows can significantly cut…
Question
Which of the following is an advantage of SOAR over SIEM?
Options
- ASOAR is much less expensive.
- BSOAR reduces the amount of human intervention required.
- CSOAR can aggregate data from many sources.
- DSOAR uses more robust encryption protocols.
How the community answered
(30 responses)- A3% (1)
- B93% (28)
- C3% (1)
Explanation
When comparing SOAR vs. SIEM, SIEM will only provide the alert. After that, it's up to the administrator to determine the path of an investigation (so, this means in my opinion more human intervation). A SOAR that automates investigation path workflows can significantly cut down on the amount of time required to handle alerts.
Topics
Community Discussion
No community discussion yet for this question.