CISM Information Security Programme Practice Question

Which TWO of the following are key components of a security operations center (SOC)? (Select TWO)

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Incident response

A SOC focuses on monitoring, detection, and response. Vulnerability management and identity management are separate functions.

Answer analysis

For each option: why learners choose it and why it is or isn't the right answer here.

✗
Vulnerability scanning
Why it's wrong here
Usually part of vulnerability management, not SOC.
✗
Identity and access management
Why it's wrong here
Separate domain from SOC.
✓
Incident response
Why this is correct
Core SOC function.
✓
Security monitoring and detection
Why this is correct
Core SOC function.
✗
Application security testing
Why it's wrong here
Part of application security, not SOC.

Go deeper