Purpose and Importance of a SOC SCE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which of the following is a core function of a Security Operations Center (SOC)?

   • AContinuous monitoring of security events and alerts.
   • BDeveloping marketing strategies for the organization.
   • CManaging employee payroll and benefits.
   • DDesigning the company's product roadmap.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A company's SOC has been operating for a year. The board asks whether the SOC has improved the company's security posture. The SOC manager has access to data on mean time to detect (MTTD), mean time to respond (MTTR), and the number of incidents that caused business disruption. Which analysis best demonstrates improvement?

   • AState that no major incidents occurred, so the SOC must be effective.
   • BCompare current MTTD and MTTR to the previous year and correlate them with a reduction in business-disrupting incidents.
   • CReport the total number of alerts handled, without context.
   • DShow the number of false positives decreased, but ignore response times.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which statement best defines a Security Operations Center (SOC)?

   • AA policy document that outlines an organization's acceptable use of technology resources.
   • BA software tool that automatically patches all vulnerabilities in an organization's network without human intervention.
   • CA framework for classifying data based on sensitivity and regulatory requirements.
   • DA dedicated team and facility that continuously monitors, detects, analyzes, and responds to cybersecurity incidents across an organization's IT environment.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company has a SOC that monitors alerts and coordinates response. During a major breach, the SOC escalates to a specialized team that performs forensic analysis and containment. Which team is the SOC escalating to?

   • AThreat intelligence team
   • BCompliance team
   • CIncident response team
   • DSecurity engineering team
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A retail company wants to justify the cost of a SOC to its board. The company has experienced several minor security incidents that were not detected until customers complained. Which benefit should the SOC emphasize as the most direct outcome of its implementation?

   • AElimination of all security risks
   • BImmediate replacement of the existing firewall and antivirus
   • CReduced mean time to detect and respond to incidents
   • DGuaranteed compliance with all regulations
   Reveal Solution Discussion Select an answer first