shieldCISSP Practice Domain 7 — Security Operations Q108 of 120

Which is the BEST description of a SOAR platform?

A CISSP practice question covering Domain 7: Security Operations. Try answering before reading the explanation below.

Show options & answer
A
A SIEM replacement
B
A platform that orchestrates security tools and automates response playbooks
✓ Correct answer
C
An EDR variant
D
A network firewall
Why "A platform that orchestrates security tools and automates response playbooks" is the right answer

SOAR (Security Orchestration, Automation, and Response) integrates with SIEM, EDR, ticketing, and threat-intel to automate playbooks (e.g., isolate host, query intel, open ticket). It complements SIEM rather than replacing it.

Study videos for this topic

Want to go deeper on Domain 7? Watch the full breakdown — every video is free, no account, no upsell.

Take the full CISSP practice test
120 questions, instant explanations, study-video links on every miss. No account.
Start full test →