Which metric is used in SOCs to evaluate the average time that it takes to identify that valid security incidents have occurred in the network?

IT Exam Items RepositoryCategory: CCNA CyberOpsWhich metric is used in SOCs to evaluate the average time that it takes to identify that valid security incidents have occurred in the network?

Which metric is used in SOCs to evaluate the average time that it takes to identify that valid security incidents have occurred in the network?

  • MTTD
  • MTTR
  • MTTC
  • Dwell Time

Explanation: SOCs use many metrics as performance indicators of how long it takes personnel to locate, stop, and remediate security incidents.

  • Dwell Time
  • Mean Time to Detect (MTTD)
  • Mean Time to Respond (MTTR)
  • Mean Time to Contain (MTTC)
  • Time to Control

Related exam: CCyberOps Associate (Version 1.0) - Module 1: The Danger Quiz