nerdexam
Splunk

SPLK-5002 · Question #69

An effective method for building automation workflows is to follow the OODA (Observe, Orient, Decide, Act) loop stages. When transitioning between the Decide and Act stages, what additional work…

The correct answer is B. Validate if the asset, identity, or service has an exemption. Before automating the Act stage of the OODA loop, it is essential to validate whether the asset, identity, or service has an exemption. This ensures that automated actions do not negatively impact business-critical systems or users who are intentionally excluded from automated

Security Automation and Orchestration

Question

An effective method for building automation workflows is to follow the OODA (Observe, Orient, Decide, Act) loop stages. When transitioning between the Decide and Act stages, what additional work should be included before automating the Act stage?

Options

  • ACreate a new response template.
  • BValidate if the asset, identity, or service has an exemption.
  • CValidate response data paths from Decide stage.
  • DCreate a new automation playbook.

How the community answered

(38 responses)
  • A
    3% (1)
  • B
    79% (30)
  • C
    13% (5)
  • D
    5% (2)

Explanation

Before automating the Act stage of the OODA loop, it is essential to validate whether the asset, identity, or service has an exemption. This ensures that automated actions do not negatively impact business-critical systems or users who are intentionally excluded from automated

Topics

#OODA loop#automation workflow design#exemption validation#SOAR orchestration

Community Discussion

No community discussion yet for this question.

Full SPLK-5002 Practice