SOC Design and Planning GSOM Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is a key functional component of a SOC?

   • APublic relations
   • BMarketing strategy
   • COffice furniture
   • DData
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which SOC architecture model typically provides the fastest response time for localized incidents?

   • AHybrid SOC
   • BDistributed SOC
   • CCentralized SOC
   • DVirtual SOC
   Reveal Solution Discussion Select an answer first
4. 13expert · medium

   A financial services company is designing a SOC. It must comply with regulations that require timely reporting of security incidents to regulators. The SOC manager needs to ensure that the SOC design supports this requirement. Which design element is most critical?

   • AA documented incident classification and escalation process with defined reporting timelines
   • BA high-availability SIEM infrastructure
   • CA dedicated threat intelligence team
   • DA SOC facility located in the same country as the regulator
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A SOC is at a maturity level where it has defined processes and some automation, but it still relies heavily on manual analysis and has limited integration between the SIEM and threat intelligence. The SOC manager wants to advance to the next maturity level. The budget is limited. Which initiative should be prioritized?

   • AIntegrate threat intelligence feeds into the SIEM to enrich alerts automatically
   • BHire additional Tier 1 analysts to handle more alerts
   • CReplace the SIEM with a more advanced platform
   • DDevelop a full SOAR implementation with automated response for all incident types
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A retail company is establishing a SOC. The business's primary goal is to protect customer payment data and maintain the availability of its e-commerce platform during peak shopping seasons. The SOC manager must define the SOC's mission. Which mission statement best aligns with these business goals?

   • AImplement the latest security technologies to stay ahead of threats
   • BProtect customer payment data and ensure the availability of the e-commerce platform by detecting and responding to security incidents that could impact these assets
   • CMonitor all network traffic to detect any potential security threat regardless of business impact
   • DAchieve the lowest possible mean time to respond for all incidents
   Reveal Solution Discussion Select an answer first