| Exam 200-201 | Question id=6000 | Security monitoring |
What is a difference between SIEM and SOAR?
| A. |
SIEM predicts and prevents security alerts, while SOAR checks attack patterns and applies the mitigation. | |
| B. |
SIEM's primary function is to collect and detect anomalies, while SOAR is more focused on security operations automation and response. | |
| C. |
SOAR's primary function is to collect and detect anomalies, while SIEM is more focused on security operations automation and response. | |
| D. |
SOAR predicts and prevents security alerts, while SIEM checks attack patterns and applies the mitigation. |