Which term is a checklist of actions to detect and respond to a specific type of incident?

• A. Failover
• B. Erros
• C. Playbook
• D. Automation

Answer: (C)

A playbook is a predefined set of actions for handling a specific type of security incident. It serves as a step-by-step checklist that guides analysts from detection through containment, eradication, and recovery, ensuring a consistent and rapid response. It often includes detection triggers, responsible roles, tools to use, and communication procedures, all tailored to that particular incident scenario. Failover centers on switching to a backup system to maintain availability, not the incident-response workflow. Automation is about performing tasks with software, whereas the term described here refers to the planned sequence of actions, though automation can be used to execute parts of it. The unused option isn’t a recognized term in this context.