Câu 96: CAS-005: CompTIA SecurityX

A security engineer reviews an after-action report from a previous security breach and notes a long lag time between detection and containment of a compromised account. The engineer suggests using SOAR to address this concern. Which of the following best explains the engineer's goal?

1. A. To prevent accounts from being compromised
2. B. To enable log correlation using machine learning
3. C. To orchestrate additional reporting for the security operations center
4. D. To prepare runbooks to automate future incident response — đáp án hiện tại