nerdexam
CompTIA

CS0-003 · Question #617

An after-action review of a ransomware attack on a company identified deficiencies in responsiveness and consistency. Which of the following choices would best facilitate improvement of these…

The correct answer is D. Implement SOAR. A SOAR platform automates and orchestrates incident‑response workflows using standardized playbooks, ensuring faster, more consistent handling of ransomware events.

Submitted by jordan8· Mar 6, 2026Incident Response and Management

Question

An after-action review of a ransomware attack on a company identified deficiencies in responsiveness and consistency. Which of the following choices would best facilitate improvement of these deficiencies?

Options

  • ALeverage a SIEM.
  • BUtilize threat intelligence sharing.
  • CSource multiple threat feeds.
  • DImplement SOAR.

How the community answered

(49 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    6% (3)
  • D
    90% (44)

Explanation

A SOAR platform automates and orchestrates incident‑response workflows using standardized playbooks, ensuring faster, more consistent handling of ransomware events.

Topics

#SOAR#incident response#automation#ransomware

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice