Câu 10: 312-39V2: Certified SOC Analyst (CSA) v2

A Security Operations Center (SOC) analyst receives a high-priority alert indicating unusual user activity. An employee account is attempting to access company resources from a different country and outside of their normal working hours. This behavior raises concerns about potential account compromise or unauthorized access to automate the initial response and quickly restrict access while further investigating the incident, which SOAR Playbook would be relevant to adapt and implement?

1. A. Deprovisioning Users SOAR Playbook — đáp án hiện tại
2. B. Phishing Investigations SOAR Playbook
3. C. Alert Enrichment SOAR Playbook
4. D. Malware Containment SOAR Playbook