Which of the following formula is used to calculate the EPS of the organization?

The correct answer is D. EPS = number of correlated events / time in seconds. In the context of a Security Operations Center (SOC), EPS typically refers to “Events Per Second,” which is a measure of the number of security events processed in one second. The correct formula for calculating EPS in a SOC environment is the number of correlated events…

SOC Fundamentals and Operations

Question

Options

AEPS = average number of correlated events / time in seconds
BEPS = number of normalized events / time in seconds
CEPS = number of security events / time in seconds
DEPS = number of correlated events / time in seconds

How the community answered

(20 responses)

C
5% (1)
D
95% (19)

Explanation

In the context of a Security Operations Center (SOC), EPS typically refers to “Events Per Second,” which is a measure of the number of security events processed in one second. The correct formula for calculating EPS in a SOC environment is the number of correlated events divided by the time in seconds. Correlated events are those that have been analyzed and aggregated by the SOC’s security information and event management (SIEM) system, indicating a potential security incident. This metric helps in understanding the operational load and performance of the SOC. material and best practices, which emphasize the importance of understanding and managing SOC operational metrics such as EPS for effective security monitoring and incident response12.

Topics

#EPS formula#events per second#SIEM metrics#log throughput

Community Discussion

No community discussion yet for this question.

Full 312-39 Practice