Splunk
SPLK-5002 · Question #116
SPLK-5002 Question #116: Real Exam Question with Answer & Explanation
The correct answer is A. MTTR. MTTR (Mean Time to Resolution/Recovery/Respond) measures how long it takes to fully complete an investigation or resolve an incident. This is the key metric for tracking investigation completion time in SOC performance dashboards.
Question
When building a metrics dashboard for the SOC manager, which metric would represent how long it takes to fully complete an investigation?
Options
- AMTTR
- BMTTA
- CMTBF
- DMTTD
Explanation
MTTR (Mean Time to Resolution/Recovery/Respond) measures how long it takes to fully complete an investigation or resolve an incident. This is the key metric for tracking investigation completion time in SOC performance dashboards.
Community Discussion
No community discussion yet for this question.