3h • 🙋♂️ CISSP
CISSP Practice Question (Domain 7: Security Operations)
A regional bank's outsourced SOC closes most alerts as false positives, and analysts now mute noisy rules to hit response targets before a regulator exam next month. What should the security operations manager do FIRST?
A. Tune the noisy rules to cut false positives
B. Assess which muted rules covered risks the bank must detect
C. Add analyst headcount to meet targets without muting
D. Reinstate every muted rule before the exam
(Explain your answer for more points in the comments!)
Come back for the answer tomorrow, or study more now!
1
4 comments
CISSP Practice Question (Domain 7: Security Operations)
skool.com/cybersecurity-study-group
Share resources, get advice, and connect with peers studying cybersecurity. Join our CISSP study group and connect with fellow professionals today!
Leaderboard (30-day)
1
+37
2
+35
3
+30
4
+30
5
+24
Powered by