Certified SOC Analyst (CSA) — Question 33

Which of the following formula is used to calculate the EPS of the organization?

Answer options

• A. EPS = average number of correlated events / time in seconds
• B. EPS = number of normalized events / time in seconds
• C. EPS = number of security events / time in seconds
• D. EPS = number of correlated events / time in seconds

Correct answer: C

Explanation

The correct formula for calculating EPS is EPS = number of security events / time in seconds, as it directly measures the rate of security events over a specified timeframe. The other options do not accurately represent the events relevant to security, with option A referring to average correlated events and option B to normalized events, which are not standard in this context, while option D also focuses on correlated events rather than security events.