312-49V11: Computer Hacking Forensic InvestigatorDemo

Question

A renowned global retail corporation recently experienced a sophisticated cyber-attack that resulted in a significant data loss. The company had invested heavily in its Security Operations Center (SOC), which was expected to serve as the first line of defense against these cyber threats. However, the SOC did not detect the attack until it was too late. In retrospect, which aspect of the SOC’s computer-forensics role may have been overlooked in this situation?

A SOC’s role in continuously monitoring and analyzing network traffic.
B SOC’s role in preserving evidence for forensic investigations.
C SOC’s role in maintaining and securing log data.
D SOC’s role in conducting a forensic investigation.

Explanation

A Security Operations Center functions as an early-warning capability by continuously monitoring and analyzing network traffic for anomalous or malicious activity. Failure in this function can allow an attack to remain undetected until data has already been lost.

312-49V11: Computer Hacking Forensic InvestigatorDemo

AstroTutor

Notes

Readiness

QuestionQ74

Community Discussion