Exam PCCET topic 1 question 177 discussion

B. Integrations. The integrations feature in SOAR (Security Orchestration, Automation, and Response) allows coordination between various technologies, security teams and external users, providing centralised visibility of data and the ability to take action in an integrated manner. Alternative D. Playbooks is not correct because, although playbooks in SOAR are important for automating and standardising incident responses, their primary function is to guide the specific actions to be taken during an incident. Playbooks define pre-configured and automated steps to respond to threats, but they are not responsible for coordination between technologies, teams and external users. That role falls to integrations, which connect and enable multiple tools and teams to work together, providing centralised visibility and coordinated actions.