Which network tool uses artificial intelligence to detect incidents and aid in incident analysis and response?
- SIEM
- Wireshark
- NetFlow
- SOAR
Explanation: SOAR works with SIEMs systems, where SIEM can detect a malicious activity and SOAR helps to respond to the threat. SOAR has many functions and benefits, including these abilities:
- The use of predefined playbooks to enable automatic response to specific threats
- The use of artificial intelligence to detect incidents and aid in incident analysis and response
Exam with this question: CyberOps Associate (Version 1.0) - Module 15: Network Monitoring and Tools Quiz Answers
Please login or Register to submit your answer