CompTIA CySA+ (CS0-002) — Question 307

Which of the following is an advantage of SOAR over SIEM?

Answer options

• A. SOAR is much less expensive.
• B. SOAR reduces the amount of human intervention required.
• C. SOAR can aggregate data from many sources.
• D. SOAR uses more robust encryption protocols.

Correct answer: B

Explanation

The correct answer is B, as SOAR systems are designed to automate responses and workflows, which significantly reduces the need for human intervention. Options A, C, and D may have some truth but do not directly highlight the primary functional advantage of SOAR over SIEM.