PCCET · Question #121
What does Cortex XSOAR use to automate security processes?
The correct answer is C. playbooks. Cortex XSOAR, a SOAR platform, uses playbooks to automate security processes, orchestrating complex sequences of tasks and integrations.
Question
What does Cortex XSOAR use to automate security processes?
Options
- Abash scripts
- BWindows PowerShell
- Cplaybooks
- DPython scripts
How the community answered
(48 responses)- A2% (1)
- B6% (3)
- C88% (42)
- D4% (2)
Why each option
Cortex XSOAR, a SOAR platform, uses playbooks to automate security processes, orchestrating complex sequences of tasks and integrations.
While bash scripts might be used within some XSOAR integrations, they are not the primary, overarching mechanism for orchestrating end-to-end security processes within the platform.
Similarly, Windows PowerShell scripts can be integrated into XSOAR, but playbooks are the higher-level abstraction that defines the automation sequence and orchestrates their execution.
Cortex XSOAR (Security Orchestration, Automation, and Response) is designed around the concept of playbooks, which are automated workflows that define, execute, and manage security operations by integrating various tools, running scripts, and guiding human analysts through incident response procedures.
Python scripts are commonly used for integrations and custom logic within XSOAR, but playbooks are the overarching framework that sequences and runs these scripts as part of a larger, defined workflow.
Concept tested: SOAR platforms (Cortex XSOAR) - Playbooks
Source: https://www.paloaltonetworks.com/sase/security-automation-orchestration/cortex-xsoar
Topics
Community Discussion
No community discussion yet for this question.