CompTIA CS0-003 Exam - Topic 4 Question 53 Discussion

Actual exam question for CompTIA's CS0-003 exam

Question #: 53
Topic #: 4

The Chief Information Security Officer for an organization recently received approval to install a new EDR solution. Following the installation, the number of alerts that require remediation by an analyst has tripled. Which option best should the organization utilize to best centralize the workload for the internal security team? (Select two).

ASOAR

BSIEM

EXDR

CMSP

DNGFW

FDLP

Show Suggested Answer

Suggested Answer: A, B

SOAR (Security Orchestration, Automation and Response) and SIEM (Security Information and Event Management) are solutions that can help centralize the workload for the internal security team by collecting, correlating, and analyzing alerts from different sources, such as EDR. SOAR can also automate and streamline incident response workflows, while SIEM can provide dashboards and reports for security monitoring and compliance. Reference: What is EDR? Endpoint Detection & Response, How Does the Cyber Kill Chain Protect Against Attacks?; What is EDR Solution?, EDR solutions secure diverse endpoints through central monitoring

by Reena at Jan 25, 2026, 08:05 PM

Limited Time Offer

25%

Off

Get Premium CS0-003 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Desmond

15 days ago

Not sure if EDR is the right fit if it’s causing more alerts.

upvoted 0 times

...

Laine

21 days ago

Maybe they should consider a tiered response strategy?

upvoted 0 times

...

Florinda

26 days ago

Wait, tripled alerts? That seems excessive for a new solution.

upvoted 0 times

...

Bettye

1 month ago

Totally agree, centralized logging could help!

upvoted 0 times

...

Billye

1 month ago

Sounds like they need a better alert management system.

upvoted 0 times

...

Rosita

1 month ago

"Why not just hire a team of security ninjas? They can probably handle the workload with their mad skills."

upvoted 0 times

...

Emilio

2 months ago

"Looks like the security team needs to call in the 'Avengers' to handle all those alerts!"

upvoted 0 times

...

Reena

2 months ago

A Security Operations Center (SOC) could be a good option to consolidate the security team's workload and improve incident response capabilities.

upvoted 0 times

...

Mireya

2 months ago

Utilizing a Security Orchestration, Automation, and Response (SOAR) platform could help automate the triage and response to the increased number of alerts.

upvoted 0 times

...

Gilma

2 months ago

The organization should consider implementing a Security Information and Event Management (SIEM) solution to centralize the security alerts and streamline the remediation process.

upvoted 0 times

...

Salena

2 months ago

I feel like we might need to implement some sort of automation to handle the volume of alerts, but I can't recall the specifics.

upvoted 0 times

...

Vi

2 months ago

This reminds me of a practice question where we discussed the benefits of using a ticketing system for alert management.

upvoted 0 times

...

Shad

3 months ago

I'm not entirely sure, but I think integrating a SIEM could help prioritize the alerts for the team.

upvoted 0 times

...

Tamra

3 months ago

I remember studying about centralized logging solutions, which might help in managing those alerts more effectively.

upvoted 0 times

...

Bulah

4 months ago

Alright, I've got a plan. I'll focus on understanding the root cause of the alert spike first, then evaluate a SIEM and SOAR to see which one best fits the organization's needs.

upvoted 0 times

...

Clay

4 months ago

This seems straightforward - a SIEM and SOAR solution would be the way to go. That should help the team manage the increased workload more efficiently.

upvoted 0 times

...

Lai

4 months ago

I'm a bit confused on the options here. Are we looking to consolidate the alerts or automate the response? Either way, I'll need to review the details more carefully.

upvoted 0 times

...

Kathrine

4 months ago

Okay, so we need to find a way to centralize the workload for the security team. I'm thinking a SIEM or security orchestration and automated response (SOAR) tool could help with that.

upvoted 0 times

...

Gerald

4 months ago

Hmm, this seems like a tricky one. I'd start by trying to understand what's causing the spike in alerts - is the new EDR solution just more effective at detecting issues?

upvoted 0 times

...