CS0-003: CompTIA Cybersecurity Analyst (CySA+)

By CompTIA · Question Mode

QuestionQ36

Security Operations

A managed security service provider is struggling to retain talent because a client’s doubling of network-connected devices has increased the workload. Which of the following would best help reduce the workload without adding staff?

Explanation

Security orchestration, automation, and response (SOAR) automates recurring, predictable security-operations tasks such as enrichment, incident handling, response, and remediation. This frees staff time and resources as the volume of managed devices and related alerts increases. Microsoft Learn: Automation in Microsoft Sentinel

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!