200-201 Security Policies and Procedures Practice Question

A SOC Tier 3 analyst is performing advanced threat analysis. Which TWO activities are typical for this tier?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Forensic analysis of compromised systems

Tier 3 involves threat hunting and advanced forensics, while Tier 1 handles triage and Tier 2 handles correlation.

Answer analysis

For each option: why learners choose it and why it is or isn't the right answer here.

✓
Forensic analysis of compromised systems
Why this is correct
Advanced forensics is a Tier 3 function.
✗
Correlating multiple alerts
Why it's wrong here
This is typically Tier 2.
✗
Monitoring SIEM dashboards
Why it's wrong here
Monitoring is Tier 1.
✗
Initial triage of alerts
Why it's wrong here
This is Tier 1 responsibility.
✓
Threat hunting
Why this is correct
Threat hunting is proactive search for threats, a Tier 3 function.

Go deeper