312-39V2: Certified SOC Analyst v2

Question

A mid-sized healthcare organization is experiencing frequent phishing and ransomware attacks. It has no internal SOC and needs proactive threat-detection and response capabilities. HIPAA compliance is essential. The organization wants a solution that provides both monitoring and rapid incident response. Which service best satisfies these needs?

Explanation

Managed detection and response (MDR) provides continuous monitoring with proactive threat hunting and operational response actions such as incident containment. This directly addresses the need for an outsourced SOC capability and rapid handling of phishing and ransomware incidents; a monitoring-and-escalation-only service does not provide the same response scope.

Learn more

CISA Continuous Diagnostics and Mitigation Technical Capabilities Volume 2

312-39V2: Certified SOC Analyst v2

AstroTutor

Notes

Readiness

QuestionQ1

Community Discussion