Which of the following is an advantage of SOAR over SIEM?

Which of the following is an advantage of SOAR over SIEM?
A . SOAR is much less expensive.
B. SOAR reduces the amount of human intervention required.
C. SOAR can aggregate data from many sources.
D. SOAR uses more robust encryption protocols.

View Answer

Answer: B

Explanation:

SOAR (Security Orchestration, Automation, and Response) reduces the amount of human intervention required, which is an advantage over SIEM (Security Information and Event Management). SIEM is a tool that collects, analyzes, and correlates data from various sources, such as logs, alerts, and events, to provide security monitoring and incident detection. SIEM can help security teams identify and prioritize potential threats, but it still requires manual intervention to investigate and respond to incidents2. SOAR is a tool that builds on SIEM by automating and orchestrating various security tasks and workflows, such as incident response, threat hunting, and threat intelligence. SOAR can help security teams reduce manual effort, improve efficiency, and accelerate incident resolution3.