Which of the following is the security analyst MOST likely implementing?

A security analyst is working on a project to implement a solution that monitors network communications and provides alerts when abnormal behavior is detected.

Which of the following is the security analyst MOST likely implementing?
A . Vulnerability scans
B. User behavior analysis
C. Security orchestration, automation, and response
D. Threat hunting

View Answer

Answer: C

Explanation:

SOAR solutions automatically aggregate and validate data from various sources, including threat intelligence, security information and event management (SIEM), and user and entity behavior analytics (UEBA) tools. It helps make security operations centers (SOCs) intelligence-driven, providing the context needed to make informed decisions and accelerate detection and response.