CompTIA Security+ (SY0-701) — Question 210

Which of the following should a security operations center use to improve its incident response procedure?

Answer options

• A. Playbooks
• B. Frameworks
• C. Baselines
• D. Benchmarks

Correct answer: A

Explanation

Playbooks provide step-by-step procedures tailored for incident response, making them essential for improving these processes. While frameworks, baselines, and benchmarks are useful for establishing security standards and practices, they do not offer the specific guidance needed during an incident.