Module 02 - Fighters in the War Against Cybercrime

Question 1

What is a SOC?

Answer 1

Security Operations Centre

Question 2

What is a SIEM?

Answer 2

Security Information and Event Management

Question 3

What does a tier 1 analyst do?

Answer 3

Monitors incoming alerts, verifies that it is a true incident

Question 4

What does a tier 2 responder do?

Answer 4

deep investigation of incidents and advise action to be taken

Question 5

What does a tier 3 threat hunter do?

Answer 5

experts in their field

Question 6

How many metrics are used in a SOC?

Answer 6

5 Metrics

Question 7

Dwell Time?

Answer 7

Length of time that threats have access to a network before they are detected

Question 8

Mean Time to Detect (MTTD)

Answer 8

the average time it takes for the SOC to identify valid security incidents

Question 9

Mean Time to Respond (MTTR)

Answer 9

The average time it takes to stop an incident

Question 10

Mean TIme to Control (MTTC)

Answer 10

The time required to stop the incident from causing further damage.

Question 11

Time to Control

Answer 11

The time required to stop the spread of malware in the network.