SY0-701 Question 214

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B1

  SIEM (Security Information and Event Management) platforms go beyond basic log collection and correlation. They often include SOAR (Security Orchestration, Automation, and Response) capabilities, allowing automated playbooks to respond to incidents (e.g., isolating a host, blocking an IP).

• Chose B5

  next-gen SIEM platforms can dynamically analyze vast datasets in real time, enabling the identification of subtle, evolving threats that traditional systems might overlook.

• 2

  B. Automated Response Actions