312-39 › Security Operations And Management
This domain covers how a SOC is organized and run: service models, tiered analyst roles, and the metrics that measure detection and response performance. Questions present operational scenarios—malware alerts, rising MTTD, tier responsibilities—and ask you to choose the correct process, containment step, or structural answer.
312-39 Security Operations And Management — All 38 Questions
Every question in this domain with answers and detailed explanations.