312-39V2: Certified SOC Analyst v2

Question

At 9:15 AM EST, Marcus Wong, a Financial Operations analyst at GlobalTech, contacts the SOC team after observing that his Excel spreadsheets are automatically encrypting themselves with unusual file extensions (for example, .locked or .crypt). The SOC’s Tier 1 analyst records the incident as ticket #INC-89271 in the SIEM system and escalates it to Jennifer Park, a Tier 2 SOC analyst on the Security Team, for additional investigation. Which Incident Response process phase is currently occurring?

Explanation

Incident Recording and Assignment consists of documenting the reported event in the incident-management system and routing or escalating it to the appropriate analyst or team. Creating ticket #INC-89271 and assigning it to a Tier 2 SOC analyst are the actions described.

312-39V2: Certified SOC Analyst v2

AstroTutor

Notes

Readiness

QuestionQ66

Community Discussion