A SOC Team Receives Multiple Alerts by a Rule That

question 91

Multiple Choice

A SOC team receives multiple alerts by a rule that detects requests to malicious URLs and informs the incident response team to block the malicious URLs requested on the firewall. Which action will improve the effectiveness of the process?

• A) Block local to remote HTTP/HTTPS requests on the firewall for users who triggered the rule.
• B) Inform the user by enabling an automated email response when the rule is triggered.
• C) Inform the incident response team by enabling an automated email response when the rule is triggered.
• D) Create an automation script for blocking URLs on the firewall when the rule is triggered.

---

Definitions:

Net Exports

The difference between a country's total value of exports and its total value of imports. If exports exceed imports, net exports are positive; if imports exceed exports, net exports are negative.

Fundamental Principle

A basic idea, concept, or rule that serves as the foundation for a system of belief or behavior or for a chain of reasoning.

International Trade

International trade entails the exchange of goods and services between countries, contributing to the global economy through imports and exports.

Opportunity Costs

Missing out on possible rewards from different opportunities when selecting a specific option.