ある組織では現在、IDS、ファイアウォール、DLPシステムを導入しています。システム管理者は、応答時間を短縮するために、これらのツールを環境に統合する必要があります。管理者は次のうちどれを使用すべきでしょうか?
正解:A
Integrating IDS, firewall, and DLP to reduce response time requires orchestration and automation. Let's evaluate:
A). SOAR(Security Orchestration, Automation, and Response):SOAR integrates security tools, automates workflows, and speeds up incident response. It's the best fit for this scenario, as CAS-005 highlights SOAR for operational efficiency.
B). CWPP (CloudWorkload Protection Platform):Focused on securing cloud workloads, not integrating on- premises tools.
C). XCCDF (Extensible Configuration Checklist Description Format):A standard for compliance checklists, not a tool for integration or response.
Reference:CompTIA SecurityX (CAS-005) objectives, Domain 2: Security Operations, focusing on SOAR for tool integration.