SecOps content engineering is the function that builds alerting profiles which identify the alerts that will be forwarded for investigation.1 pointTrue False

Which SecOps Investigate function provides the data needed to perform the different types of investigation from severity triage to detailed analysis and hunting?1 pointForensics and TelemetryDetailed AnalysisBreach ResponseChange Control

Which SecOps Identify function defines the event prioritization based on impact to the business to help guide the analyst’s actions through the incident response lifecycle?1 pointEscalation Process Initial ResearchContent EngineeringSeverity Triage

Fill in the blank: Instead of reviewing pages and pages of logs to determine if there are any new security threats, analysts can use _____ tools, which provide alerts for specific types of threats and risks. 1 pointprogramming languagenetwork protocol analyzer (packet sniffer)operating systemsecurity information and event management (SIEM)

After receiving an alert about a suspicious login attempt, a security analyst can access their _____ to gather information about the alert.1 pointSIEM tool dashboardnetwork protocol analyzer (packet sniffer)internal infrastructureplaybook

Which personnel in a SOC is assigned the task of verifying whether an alert triggered by monitoring software represents a true security incident?Tier 2 personnelSOC ManagerTier 3 personnelTier 1 personnelNavigation Bar