SOC Architecture and Infrastructure SCE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is a common source of data that a SOC collects and aggregates?

   • AEmployee payroll records
   • BNetwork traffic flows
   • CHuman resources performance reviews
   • DMarketing campaign analytics
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the main purpose of integrating threat intelligence feeds into a SOC?

   • ATo automatically patch all vulnerabilities
   • BTo encrypt all SOC communications
   • CTo provide context about known threats and indicators of compromise
   • DTo replace the need for human analysts
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   After containing an incident, a SOC team needs to remove the threat from affected systems and restore normal operations. Which phase of the incident response workflow does this represent?

   • AContainment
   • BDetection and analysis
   • CEradication and recovery
   • DPost-incident activity
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the main purpose of data aggregation in a SOC?

   • ATo combine data from multiple sources into a centralized platform for analysis
   • BTo encrypt data in transit between endpoints and the SOC
   • CTo reduce the storage requirements for all security logs
   • DTo eliminate the need for endpoint monitoring tools
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which of the following is a key performance indicator (KPI) used to measure SOC effectiveness?

   • ANumber of servers in the data center
   • BTotal IT budget
   • CNumber of employees in the SOC
   • DMean Time to Respond (MTTR)
   Reveal Solution Discussion Select an answer first