Which of the following should the organization implement?

An organization wants to integrate its incident response processes into a workflow with automated decision points and actions based on predefined playbooks.

Which of the following should the organization implement?
A . SIEM
B. SOAR
C. EDR
D. CASB

View Answer

Answer: B

Explanation:

Security Orchestration, Automation, and Response (SOAR) should be implemented to integrate incident response processes into a workflow with automated decision points and actions based on predefined playbooks.

References: CompTIA Security+ Study Guide, Exam SY0-601, Chapter 9