CompTIA CySA+ (CS0-003) — Question 408

Which of the following is the term for a predefined set of automated actions that incident responders and SOC analysts can use to enhance operations?

Answer options

• A. Threat modeling
• B. Detection set
• C. CVSS
• D. Playbooks

Correct answer: D

Explanation

The correct answer is D, Playbooks, as they provide structured guidance for incident response processes. Options A (Threat modeling), B (Detection set), and C (CVSS) refer to different aspects of cybersecurity and do not represent a collection of automated actions for operational enhancement.