CompTIACompTIA
CS0-003 · Question #617
CS0-003 Question #617: Real Exam Question with Answer & Explanation
Sign in or unlock CS0-003 to reveal the answer and full explanation for question #617. The question stem and answer options stay visible for context.
Submitted by jordan8· Mar 6, 2026Incident Response and Management
Question
An after-action review of a ransomware attack on a company identified deficiencies in responsiveness and consistency. Which of the following choices would best facilitate improvement of these deficiencies?
Options
- ALeverage a SIEM.
- BUtilize threat intelligence sharing.
- CSource multiple threat feeds.
- DImplement SOAR.
Unlock CS0-003 to see the answer
You've previewed enough free CS0-003 questions. Unlock CS0-003 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#SOAR#incident response#automation#ransomware