How can a SOC analyst highlight alerts generated on C-level executive hosts?

The correct answer is A. Add the C-level executive users to the Executive Accounts asset role. Assigning those accounts to the Executive Accounts asset role elevates and visually highlights any alerts tied to their hosts, making them stand out for analyst review.

Alert Management

Question

Options

AAdd the C-level executive users to the Executive Accounts asset role.
BAdd a tag to the C-level executive users.
CCreate a Featured Alert field for the C-level hosts.
DCreate a dynamic group for the C-level hosts.

How the community answered

(44 responses)

A
91% (40)
B
5% (2)
C
2% (1)
D
2% (1)

Explanation

Assigning those accounts to the Executive Accounts asset role elevates and visually highlights any alerts tied to their hosts, making them stand out for analyst review.

Topics

#executive accounts#asset roles#alert prioritization#SOC workflow

Community Discussion

No community discussion yet for this question.

Full XSIAM-ANALYST Practice