200-201 Security Policies and Procedures Practice Question

A SOC Tier 3 analyst is performing threat hunting. Which activity best describes the primary focus of a Tier 3 analyst?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Proactively searching for advanced threats

Tier 3 focuses on proactive threat hunting and advanced analysis.

Answer analysis

For each option: why learners choose it and why it is or isn't the right answer here.

✗
Monitoring incoming alerts for potential incidents
Why it's wrong here
Alert monitoring is Tier 1.
✗
Correlating alerts from multiple sources
Why it's wrong here
Correlation is often Tier 2.
✓
Proactively searching for advanced threats
Why this is correct
Threat hunting is a Tier 3 function.
✗
Creating user accounts and permissions
Why it's wrong here
This is an administrative task.

Go deeper