Which cybersecurity role is primarily responsible for monitoring security alerts, triaging incidents, and escalating threats in a Security Operations Center?
- A.A. Penetration tester
- B.B. SOC Analyst
- C.C. CISO
- D.D. Software developer
Why B is correct
SOC Analysts (Tier 1/2/3) monitor SIEM dashboards, analyze security alerts, triage incidents, and escalate confirmed threats. Tier 1 handles initial alert review, Tier 2 performs deeper investigation, and Tier 3 handles advanced threat hunting and incident response. It's a common entry point into cybersecurity.
Know someone studying for Security Fundamentals? Send them this one.