While working in Mission Control, an analyst is looking to add enrichment and contextualize the finding that is being worked. If they were to click the execute icon next to the…

The correct answer is B. 1 playbook. Clicking the execute icon next to "Mission_Control_Identifier_Reputation_Analysis" triggers exactly 1 playbook. In Mission Control, each listed playbook is a discrete automation, so selecting it runs only that specific playbook for enrichment and contextualization.

Security Automation and Orchestration

Question

While working in Mission Control, an analyst is looking to add enrichment and contextualize the finding that is being worked. If they were to click the execute icon next to the "Mission_Control_Identifier_Reputation_Analysis" playbook, how many playbooks would execute?

Exhibit

Options

AUnknown
B1 playbook
CNone
DAt least 1 playbook

How the community answered

(42 responses)

A
7% (3)
B
74% (31)
C
17% (7)
D
2% (1)

Explanation

Clicking the execute icon next to "Mission_Control_Identifier_Reputation_Analysis" triggers exactly 1 playbook. In Mission Control, each listed playbook is a discrete automation, so selecting it runs only that specific playbook for enrichment and contextualization.

Topics

#SOAR playbook execution#Mission Control#enrichment#playbook trigger

Community Discussion

No community discussion yet for this question.

Full SPLK-5002 Practice