nerdexam
Splunk

SPLK-5002 · Question #116

When building a metrics dashboard for the SOC manager, which metric would represent how long it takes to fully complete an investigation?

The correct answer is A. MTTR. MTTR (Mean Time to Resolution/Recovery/Respond) measures how long it takes to fully complete an investigation or resolve an incident. This is the key metric for tracking investigation completion time in SOC performance dashboards.

Performance Optimization and Troubleshooting

Question

When building a metrics dashboard for the SOC manager, which metric would represent how long it takes to fully complete an investigation?

Options

  • AMTTR
  • BMTTA
  • CMTBF
  • DMTTD

How the community answered

(45 responses)
  • A
    82% (37)
  • B
    4% (2)
  • C
    2% (1)
  • D
    11% (5)

Explanation

MTTR (Mean Time to Resolution/Recovery/Respond) measures how long it takes to fully complete an investigation or resolve an incident. This is the key metric for tracking investigation completion time in SOC performance dashboards.

Topics

#SOC metrics#MTTR#incident resolution#KPIs

Community Discussion

No community discussion yet for this question.

Full SPLK-5002 Practice