Systems that allow for accelerated incident response through the execution of standardized and automated playbooks that work upon inputs from security technology and other data flows are known as what?

Systems that allow for accelerated incident response through the execution of standardized and automated playbooks that work upon inputs from security technology and other data flows are known as what?
A . XDR
B . STEP
C . SOAR
D . SIEM

View Answer

Answer: C

Explanation:

SOAR stands for security orchestration, automation and response. It is a software solution that enables security teams to integrate and coordinate separate tools into streamlined threat response workflows. SOAR systems allow for accelerated incident response through the execution of standardized and automated playbooks that work upon inputs from security technology and other data flows. SOAR systems can also help ensure consistency, reduce human errors, and improve efficiency and scalability of security operations.

Reference: Security Operations Infrastructure from Palo Alto Networks

What is SOAR (security orchestration, automation and response)? from IBM

Security Operations Fundamentals (SOF) Flashcards from Quizlet