Splunk
SPLK-5002 · Question #82
When creating a new playbook to be called directly from Mission Control or Enterprise Security, which type of playbook must be used?
The correct answer is C. Response. A Response playbook must be used when creating a new playbook that can be called directly from Mission Control or Enterprise Security. Response playbooks are designed to run in these contexts to standardize and automate incident response actions.
Security Automation and Orchestration
Question
When creating a new playbook to be called directly from Mission Control or Enterprise Security, which type of playbook must be used?
Options
- AProcess
- BAutomation
- CResponse
- DInput
How the community answered
(30 responses)- A7% (2)
- B13% (4)
- C77% (23)
- D3% (1)
Explanation
A Response playbook must be used when creating a new playbook that can be called directly from Mission Control or Enterprise Security. Response playbooks are designed to run in these contexts to standardize and automate incident response actions.
Topics
#SOAR playbook#Mission Control#Enterprise Security#response playbook
Community Discussion
No community discussion yet for this question.