Purpose and Importance of a SOC SCE Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   How does a SOC contribute to business continuity?

   • ABy detecting and responding to incidents quickly, it helps minimize downtime and operational disruption.
   • BBy performing regular backups of all company data.
   • CBy developing the organization's business continuity plan.
   • DBy ensuring that all employees have access to the network at all times.
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A company has a SOC, an incident response team, and a security engineering team. A new critical vulnerability is announced. The security engineering team wants to deploy a patch immediately, but the SOC wants to first ensure that the patch does not break critical business applications. The incident response team is on standby. Which decision best balances security and business continuity?

   • ADeploy the patch immediately to all systems without testing.
   • BHave security engineering test the patch in a staging environment while the SOC monitors for active exploitation.
   • CLet the incident response team decide the patching schedule.
   • DDelay patching indefinitely until the SOC confirms no active exploitation.
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   How does a SOC differ from an incident response (IR) team?

   • AThe SOC provides continuous monitoring and initial triage, while the IR team is often called in for deeper investigation and containment during significant incidents.
   • BThe SOC is a temporary team formed only during a crisis, while the IR team is permanent.
   • CThe SOC focuses on proactive threat hunting, while the IR team focuses on reactive monitoring.
   • DThe SOC is responsible for developing security policies, while the IR team enforces them.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A healthcare organization must demonstrate to auditors that it actively monitors access to patient records and responds to suspicious activity. The organization also wants to reduce the mean time to detect and respond to security events. Which SOC capability most directly supports both of these goals?

   • AA security awareness training program for all employees.
   • BAnnual penetration testing of the electronic health record system.
   • CContinuous monitoring and alerting with documented incident response procedures.
   • DA vulnerability management program that scans systems monthly.
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   What is the main purpose of a Security Operations Center (SOC) in relation to cybersecurity incidents?

   • ATo replace the need for other security teams by handling all security tasks.
   • BTo enforce regulatory compliance by conducting annual audits.
   • CTo design and implement new security architectures for the organization.
   • DTo detect, analyze, and respond to cybersecurity incidents in a timely and effective manner.
   Reveal Solution Discussion Select an answer first