CS0-003 · Question #597
An analyst notices that logs contain multiple events for computer account changes during monthly patch maintenance windows, resulting in a flood of tickets. The events generated are from the same…
The correct answer is A. SOAR. Security Orchestration, Automation, and Response (SOAR) platforms are designed to automate repetitive security tasks, such as closing tickets with known benign patterns. In this case, SOAR can automatically analyze and close tickets generated from predictable events like…
Question
An analyst notices that logs contain multiple events for computer account changes during monthly patch maintenance windows, resulting in a flood of tickets. The events generated are from the same system and time frame. The analyst determines that these tickets could be closed without human interaction. Which of the following is the best tool for automatically closing tickets containing the same information?
Options
- ASOAR
- BEDR
- CCASB
- DSIEM
How the community answered
(28 responses)- A79% (22)
- B11% (3)
- C7% (2)
- D4% (1)
Explanation
Security Orchestration, Automation, and Response (SOAR) platforms are designed to automate repetitive security tasks, such as closing tickets with known benign patterns. In this case, SOAR can automatically analyze and close tickets generated from predictable events like monthly patch
Topics
Community Discussion
No community discussion yet for this question.