M4 C4.2.1

What is the primary purpose of a Security Operations Centre (SOC)?

• To build websites

• To manage HR data

• To monitor and respond to cybersecurity incidents

• To train developers

Which of the following tools is commonly used by SOC for log correlation?

• VPN

• SIEM

• ERP

• CRM

Who are Level 1 employees in a SOC responsible for?

• Deep investigation

• Procurement

• 24x7 Monitoring

• Software development

What is the role of Level 2 employees in a SOC?

• Hardware repair

• Basic monitoring

• Deep analysis and investigation

• Server management

Which external agency is associated with providing cyber threat intelligence in India?

• CBI

• UIDAI

• CERT-In

• TRAI

How often should top management meet the CISO regarding SOC operations?

• Monthly

• Once in a quarter

• Annually

• Only during incidents

Which of these is a key characteristic of a good SOC?

• Shared with IT Department

• Open to the public

• Has documented policies and guidelines

• Runs only during business hours

What does the technology acquisition process for SOC begin with?

• Signing contract

• Purchase order

• Specification preparation

• Vendor confirmation

Which tool is NOT typically used in a SOC?

• Malware Analyzer

• Forensic Analyzer

• Payroll System

• Cryptosystems

Why does SOC operate in a separate physical space from the IT department?

• To save electricity

• For secrecy and low latency

• Due to lack of space

• For training new employees