312-39V2: Certified SOC Analyst v2

Question

CyberBank, a leading financial institution, has recently faced a series of cyberattacks, including phishing campaigns, insider threats, and attempted data breaches aimed at customer financial records. The bank operates across multiple regions, leaving it vulnerable to regional compliance violations, fraud attempts, and advanced persistent threats (APTs). During a board meeting, the CISO proposes a security solution that provides continuous security monitoring, rapid threat detection, and centralized visibility across all branches. Which of the following solutions would provide automated alerting, digital forensics capabilities, and active threat hunting?

Explanation

A Security Operations Center (SOC) provides continuous monitoring and centralized security operations, including alert handling, threat detection and investigation, incident response, digital forensics, and proactive threat hunting. SIEM and SOAR can be components of a SOC, but neither alone represents the complete operational capability. Microsoft’s SOC guidance lists hunting investigation, forensics, incident response, and security event monitoring among established SOC services.

Learn more

312-39V2: Certified SOC Analyst v2

AstroTutor

Notes

Readiness

QuestionQ43

Community Discussion