Purpose and Importance of a SOC SCE Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is the primary function of a Security Operations Center (SOC) in an organization?

   • ATo provide a centralized capability for continuous monitoring, detection, analysis, and response to security incidents.
   • BTo perform regular penetration testing of all applications and infrastructure.
   • CTo develop and enforce employee security awareness training programs.
   • DTo manage the organization's firewall and network hardware configurations.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A company has a SOC that monitors alerts and a separate threat intelligence team that produces reports on emerging attack techniques. The SOC receives a new alert that matches a technique described in a recent threat intelligence report. What should the SOC do with this information?

   • AIgnore the threat intelligence because the SOC only monitors alerts.
   • BForward the alert to the threat intelligence team and close the ticket.
   • CUse the threat intelligence to prioritize the alert and enrich the investigation.
   • DWait for the threat intelligence team to respond before taking any action.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A SOC analyst notices an unusual spike in outbound traffic from a server that normally has low activity. The analyst creates a ticket and begins investigating the traffic patterns. Which core SOC function is the analyst performing?

   • ASecurity engineering
   • BIncident response
   • CReporting
   • DThreat detection and analysis
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A bank is evaluating whether to invest in a SOC. The compliance team notes that regulators require timely detection and reporting of security incidents. The operations team wants to reduce the time spent manually correlating logs. Which value of a SOC best addresses both concerns?

   • AIt guarantees that all incidents are prevented before they occur.
   • BIt replaces the need for external auditors.
   • CIt eliminates all security risks, making compliance reporting unnecessary.
   • DIt centralizes monitoring and reporting, improving compliance and operational efficiency.
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A company is considering whether to build an in-house SOC or outsource to a managed security service provider (MSSP). The company has a small security team, but it wants to retain control over incident response and maintain close coordination with its IT department. The budget is limited. Which approach best balances these factors?

   • ADo not use a SOC and rely on the IT team to monitor alerts.
   • BBuild a full in-house SOC with 24/7 staffing.
   • CUse an MSSP for 24/7 monitoring and alerting, but keep an internal team for incident response and coordination.
   • DOutsource everything, including incident response, to the MSSP.
   Reveal Solution Discussion Select an answer first