Which of the following is typically included in a security report?

The personal passwords of users

A summary of incidents, their impact, and recommended actions

The raw contents of every log file

A SOC supervisor wants a dashboard that shows the number of open critical alerts, the average time to acknowledge alerts, and a list of the analysts with the most assigned alerts. Which widgets should be used?

Pie chart, line chart, and table

Number widget, gauge widget, and bar chart

Heatmap, scatter plot, and number widget

What is the primary purpose of generating a security report in a SIEM?

To replace the need for a security dashboard

To store raw logs for long-term retention

To automatically block malicious traffic

To summarize incident data and analysis results for stakeholders

Which of the following is a key principle for designing an effective security dashboard?

Focus on the most relevant metrics and alerts that support incident analysis

Display raw logs directly on the dashboard

Use only real-time data and avoid historical trends

Include as many widgets as possible to show all available data

Why might a SOC analyst customize a dashboard differently from a SOC manager?

Because the analyst needs to see detailed event-level data, while the manager needs a high-level overview

Because the manager needs to see raw logs, while the analyst needs summary metrics

Because the analyst has more technical skills than the manager

Because dashboards cannot be shared between users

EC-CouncilSOC Essentials

Domain 6Objective 2

Correlation Rules, Dashboards, and Reports SCE Practice Questions (Page 5)

Part of the Incident Detection and Analysis domain, which makes up ~13% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–10 in this domain), expect 1–2 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

10concepts

Questions 21–25

21foundation · easy
Which of the following is typically included in a security report?
Select an answer first
22application · medium
A SOC supervisor wants a dashboard that shows the number of open critical alerts, the average time to acknowledge alerts, and a list of the analysts with the most assigned alerts. Which widgets should be used?
Select an answer first
23foundation · easy
What is the primary purpose of generating a security report in a SIEM?
Select an answer first
24foundation · easy
Which of the following is a key principle for designing an effective security dashboard?
Select an answer first
25foundation · easy
Why might a SOC analyst customize a dashboard differently from a SOC manager?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SCE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “SCE” is a trademark of its owner, used for identification only.