Which cybersecurity role is primarily responsible for monitoring security alerts, triaging incidents, and escalating threats in a Security Operations Center?
- A.Penetration tester
- B.Software developer
- C.CISO
- D.SOC Analyst
Why D is correct
SOC Analysts (Tier 1/2/3) monitor SIEM dashboards, analyze security alerts, triage incidents, and escalate confirmed threats. Tier 1 handles initial alert review, Tier 2 performs deeper investigation, and Tier 3 handles advanced threat hunting and incident response. It's a common entry point into cybersecurity.
Know someone studying for Security Fundamentals? Send them this one.