Câu 26: 312-39V2: Certified SOC Analyst (CSA) v2

A large financial institution, SOC has recently identified a sophisticated phishing campaign targeting its employees, resulting in unauthorized access to sensitive customer data. The SOC team is under pressure to enhance their detection and response capabilities to manage this evolving threat. The organization already uses a SIEM system for log aggregation and alerting, alongside an EDR solution for endpoint visibility. Additionally, they have access to XDR for broader threat detection and XSOAR for security orchestration and automation. As a SOC analyst, you’ve been asked to recommend an integration strategy to improve real-time threat correlation, streamline incident response workflows, and maximize the use of existing tools. Which of the following integrations would meet these goals?

1. A. Integrate XDR with SIEM
2. B. Integrate XDR with XSOAR — đáp án hiện tại
3. C. Integrate EDR with XSOAR
4. D. Integrate EDR with SIEM