CompTIA Security+ (SY0-701) — Question 358

Which of the following is most likely to be used as a just-in-time reference document within a security operations center?

Answer options

• A. Change management policy
• B. Risk profile
• C. Playbook
• D. SIEM profile

Correct answer: C

Explanation

The correct answer is C, the Playbook, as it provides specific instructions and procedures for responding to various security incidents in real-time. The other options, while important, serve broader governance and risk assessment roles and are not typically designed for immediate operational guidance.