ISC2 CC Security Operations Practice Question
A SOC analyst detects a pattern of outbound traffic from an internal server to a known malicious IP address. Which SOC tier should this alert be escalated to for a deeper investigation?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Tier 2
Tier 2 analysts conduct deeper investigation to confirm if the activity is malicious and determine the scope.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Tier 3
Why it's wrong here
Tier 3 handles advanced analysis and threat hunting, not typical escalation from Tier 1.
- ✓
Tier 2
Why this is correct
Correct. Tier 2 conducts in-depth investigation.
- ✗
Tier 1
Why it's wrong here
Tier 1 performs initial triage; escalation to Tier 2 is needed for deeper analysis.
- ✗
Incident Response Team
Why it's wrong here
Incident response may be called after Tier 2 confirms an incident.
Go deeper
Related to this question
Learn chapter
Network Security Foundations
Key term
SOC
A Security Operations Center (SOC) is a centralized team that monitors, detects, analyzes, and responds to cybersecurity incidents to protect an organization's information systems.
Key term
Alert
An alert is a notification that something unusual or potentially harmful has happened in a computer system or network.
About these practice questions
One of 976 original CC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.