CompTIACompTIA
CS0-003 · Question #188
CS0-003 Question #188: Real Exam Question with Answer & Explanation
Sign in or unlock CS0-003 to reveal the answer and full explanation for question #188. The question stem and answer options stay visible for context.
Submitted by andreas_gr· Mar 6, 2026Security operations
Question
An analyst recommends that an EDR agent collect the source IP address, make a connection to the firewall, and create a policy to block the malicious source IP address across the entire network automatically. Which of the following is the best option to help the analyst implement this recommendation?
Options
- ASOAR
- BSIEM
- CSLA
- DIoC
Unlock CS0-003 to see the answer
You've previewed enough free CS0-003 questions. Unlock CS0-003 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Security automation#SOAR#EDR integration#Threat blocking