Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) — Question 290

Which metric should be used when evaluating the effectiveness and scope of a Security Operations Center?

Answer options

• A. The average time the SOC takes to register and assign the incident.
• B. The total incident escalations per week.
• C. The average time the SOC takes to detect and resolve the incident.
• D. The total incident escalations per month.

Correct answer: C

Explanation

The correct answer is C, as it directly measures the SOC's efficiency in detecting and resolving incidents, which is crucial for its effectiveness. The other options focus on either the incident registration and assignment process or the frequency of escalations, which do not provide a complete picture of the SOC's operational efficacy.