An organization is using a PKI management server and a SOAR platform to manage the certificate lifecycle. The SOAR platform queries a certificate management tool to check all endpoints for SSL certificates that have either expired or are nearing expiration. Engineers are struggling to manage problematic certificates outside of PKI management since deploying certificates and tracking them requires searching server owners manually. Which action will improve workflow automation?
The best solution to improve workflow automation is to integrate the SOAR solution with Active Directory to pull server owner details and send automated emails requesting updates for problematic certificates. This integration will streamline the process by automatically identifying the responsible server owner and facilitating prompt action without manual intervention.
I would choose D
Its D - https://www.recordedfuture.com/soar-use-cases/
what if there is no AD was implemented or integrated? usually the Unix production was not AD joined.
what if there is no AD was implemented or integrated? usually the Unix production was not AD joined.
Its D https://www.studocu.com/row/document/arab-academy-for-science-technology-maritime-transport/marketing/top-security-orchestration-use-cases/35519516
Confirmed it's D
If we focus on "to manage problematic certificates outside of PKI" then we can assume that the Engineers know what are the problematic certificates. In that case, "C" can be also correct. Thoughts?
Nie they are worried about how to know without doing the job manually to detect the owner of the servers and assign the task, and yes I started thinking the best way is D
Well, hard question. C or D, but i will chose C.
C. Implement a new workflow for SOAR to fetch a report of assets that are outside of the PKI zone, sort assets by certification management leads, and automate alerts that updates are needed. This action involves implementing a new workflow within the SOAR platform that fetches a report of assets that are outside of the PKI zone, and then sorts these assets by certification management leads. The workflow then automates alerts that updates are needed, which can help to streamline the certificate management process and improve the efficiency of the workflow. the other answers are all possible options to improve the certificate management process, but they do not address the specific challenge of managing problematic certificates outside of the PKI management. - ChatGPT
SOAR playbook need to fetch certificate info fromActive Directory, Salesforce etc and send notification of problematic certificate. so I would choose Answer D
I would go with D