CompTIA Security+ (SY0-601) — Question 127

Which of the following typically uses a combination of human and artificial intelligence to analyze event data and take action without intervention?

Answer options

• A. TTP
• B. OSINT
• C. SOAR
• D. SIEM

Correct answer: C

Explanation

The correct answer is SOAR, which stands for Security Orchestration, Automation, and Response. SOAR platforms are designed to integrate human expertise with automated processes to enhance incident response. TTP (Tactics, Techniques, and Procedures), OSINT (Open Source Intelligence), and SIEM (Security Information and Event Management) do not inherently combine human and artificial intelligence in the same way to automate actions.