Which phase of the incident response lifecycle would cause the least amount of friction when replacing manual steps with automation?

The correct answer is B. Triage. Triage involves repetitive, data-gathering, and enrichment steps (e.g., indicator lookups, context collection) that can be automated with minimal risk. This phase typically introduces the least friction when shifting from manual work to automation.

Security Automation and Orchestration

Question

Options

ARendering a verdict
BTriage
CContainment
DRemediation

How the community answered

(60 responses)

A
8% (5)
B
72% (43)
C
15% (9)
D
5% (3)

Explanation

Triage involves repetitive, data-gathering, and enrichment steps (e.g., indicator lookups, context collection) that can be automated with minimal risk. This phase typically introduces the least friction when shifting from manual work to automation.

Topics

#automation#triage#incident response lifecycle#manual-to-automation

Community Discussion

No community discussion yet for this question.

Full SPLK-5002 Practice