PCCET · Question #21
Systems that allow for accelerated incident response through the execution of standardized and automated playbooks that work upon inputs from security technology and other data flows are known as…
The correct answer is C. SOAR. SOAR stands for Security Orchestration, Automation, and Response. SOAR platforms integrate with existing security tools and data sources, then execute automated playbooks (predefined response workflows) to handle incidents faster and at scale - reducing the need for manual…
Question
Systems that allow for accelerated incident response through the execution of standardized and automated playbooks that work upon inputs from security technology and other data flows are known as what?
Options
- AXDR
- BSTEP
- CSOAR
- DSIEM
How the community answered
(29 responses)- A7% (2)
- C90% (26)
- D3% (1)
Explanation
SOAR stands for Security Orchestration, Automation, and Response. SOAR platforms integrate with existing security tools and data sources, then execute automated playbooks (predefined response workflows) to handle incidents faster and at scale - reducing the need for manual analyst intervention. XDR (Extended Detection and Response) focuses on unified threat detection across endpoints, networks, and cloud. SIEM (Security Information and Event Management) aggregates and correlates log data but does not natively automate responses. STEP is not a standard security platform acronym in this context.
Topics
Community Discussion
No community discussion yet for this question.