Which of the following is most likely to be used as a just-in-time reference document within a security operations center?
Choose an answer
Tap an option to check your answer.
Correct answer: Playbook.
Why this is the answer
A playbook is a detailed, step-by-step guide for responding to specific security incidents or alerts. It provides security analysts with immediate, actionable instructions, making it an essential just-in-time reference for consistent and efficient incident response within a Security Operations Center (SOC). Change management policy outlines procedures for modifying systems but isn't a direct incident response guide. A risk profile assesses an organization's overall risk posture, not specific incident handling. A SIEM profile defines how a Security Information and Event Management system collects and analyzes data, rather than guiding human response actions.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed