Apply Automation and Orchestration ZERO-TRUST-DESIGN Practice Questions (Page 7)

Questions 31–31

1. 31application · medium

   An organization's incident response process involves multiple tools: the SIEM detects a potential compromise, the ticketing system creates a ticket, the firewall blocks an IP, and the EDR isolates a host. Currently, analysts manually execute each step. The team wants to reduce response time and errors. What should they implement?

   • AA SOAR platform that orchestrates the SIEM, ticketing, firewall, and EDR actions into a single automated workflow.
   • BA new SIEM that can perform all the functions of the other tools.
   • CA manual runbook that documents each step for analysts to follow consistently.
   • DA script that runs on a single server to manually trigger each tool's API in sequence.
   Reveal Solution Discussion Select an answer first