CS0-003 · Question #54
Which of the following is the best metric for an organization to focus on given recent investments in SIEM, SOAR, and a ticketing system?
The correct answer is A. Mean time to detect. Mean time to detect (MTTD) is the best metric for an organization to focus on given recent investments in SIEM, SOAR, and a ticketing system. MTTD is a metric that measures how long it takes to detect a security incident or threat from the time it occurs. MTTD can be improved…
Question
Which of the following is the best metric for an organization to focus on given recent investments in SIEM, SOAR, and a ticketing system?
Options
- AMean time to detect
- BNumber of exploits by tactic
- CAlert volume
- DQuantity of intrusion attempts
How the community answered
(27 responses)- A78% (21)
- B11% (3)
- C7% (2)
- D4% (1)
Explanation
Mean time to detect (MTTD) is the best metric for an organization to focus on given recent investments in SIEM, SOAR, and a ticketing system. MTTD is a metric that measures how long it takes to detect a security incident or threat from the time it occurs. MTTD can be improved by using tools and processes that can collect, correlate, analyze, and alert on security data from various sources. SIEM, SOAR, and ticketing systems are examples of such tools and processes that can help reduce MTTD and enhance security operations.
Topics
Community Discussion
No community discussion yet for this question.