Bird
0
0

What is wrong with this SOAR playbook step?

medium📝 Analysis Q7 of 15
Cybersecurity - Advanced Threat Protection
What is wrong with this SOAR playbook step?
if alert.type == 'ransomware' isolate_files()
ANo error, syntax is correct
BIncorrect alert type string
CMissing 'then' keyword after condition
DFunction isolate_files() does not exist
Step-by-Step Solution
Solution:

  1. Step 1: Check syntax for conditional action

    SOAR playbooks require 'then' keyword after condition before action.

  2. Step 2: Identify missing keyword

    The snippet lacks 'then' causing syntax error.

  3. Final Answer:

    Missing 'then' keyword after condition -> Option C

  4. Quick Check:

    Condition must have 'then' before action [OK]
Quick Trick: Always include 'then' after condition [OK]
Common Mistakes:
MISTAKES
  • Omitting 'then'
  • Assuming function error
  • Mistaking alert type string

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More Cybersecurity Quizzes
Advanced Threat Protection - Advanced Persistent Threats (APT) - Quiz 6medium Advanced Threat Protection - Threat hunting techniques - Quiz 1easy Digital Forensics - Memory forensics basics - Quiz 14medium Emerging Security Topics - Quantum computing threats to cryptography - Quiz 14medium Emerging Security Topics - Quantum computing threats to cryptography - Quiz 4medium Emerging Security Topics - AI in cybersecurity (defense and offense) - Quiz 1easy Incident Response - Eradication and recovery - Quiz 15hard Security Architecture and Design - Why secure design prevents vulnerabilities - Quiz 10hard Security Architecture and Design - Threat modeling (STRIDE, DREAD) - Quiz 12easy Security Architecture and Design - Why secure design prevents vulnerabilities - Quiz 12easy