in the operation of a SOC, which system is frequently used to let an analyst select alerts from a pool to investigate?

IT Exam Items RepositoryCategory: CCNA CyberOpsin the operation of a SOC, which system is frequently used to let an analyst select alerts from a pool to investigate?

in the operation of a SOC, which system is frequently used to let an analyst select alerts from a pool to investigate?

  • syslog server
  • registration system
  • ticketing system
  • security alert knowledge-based system

Explanation: In a SOC, a ticketing system is typically used for a work flow management system.

Related exam: CCNA Cyber Ops (v1.1) – Chapter 1 Exam Answers
Related exam: CyberOps Associate (Version 1.0) - Module 2: Fighters in the War Against Cybercrime Quiz Answers