Palo_Alto_Networks
CLOUDSEC-PRO · Question #212
Which two functions are typically part of Tier 1 SOC operations? (Choose two)
The correct answer is A. Initial alert triage C. Escalation to Tier 2. Tier 1 SOC analysts focus on monitoring SIEM alerts, performing basic analysis, and escalating confirmed threats to higher-tier analysts. They are not typically responsible for network design or malware creation.
Security Operations Center Structure and Roles
Question
Which two functions are typically part of Tier 1 SOC operations? (Choose two)
Options
- AInitial alert triage
- BNetwork architecture design
- CEscalation to Tier 2
- DMalware development
How the community answered
(28 responses)- A79% (22)
- B14% (4)
- D7% (2)
Explanation
Tier 1 SOC analysts focus on monitoring SIEM alerts, performing basic analysis, and escalating confirmed threats to higher-tier analysts. They are not typically responsible for network design or malware creation.
Topics
#Tier 1 SOC#alert triage#escalation procedures#SOC operations
Community Discussion
No community discussion yet for this question.