A SOC Team Receives Multiple Alerts by a Rule That

question 91

Multiple Choice

A SOC team receives multiple alerts by a rule that detects requests to malicious URLs and informs the incident response team to block the malicious URLs requested on the firewall. Which action will improve the effectiveness of the process?

• A) Block local to remote HTTP/HTTPS requests on the firewall for users who triggered the rule.
• B) Inform the user by enabling an automated email response when the rule is triggered.
• C) Inform the incident response team by enabling an automated email response when the rule is triggered.
• D) Create an automation script for blocking URLs on the firewall when the rule is triggered.

---

Definitions:

Economic Order Quantity

A formula used to determine the optimal quantity of inventory to order that minimizes total inventory costs.

Inventory Level

The quantity of goods, materials, or products that are held by a company at a given time, used to meet demand without incurring excess or shortage.

Fixed Quantity Inventory

A replenishment strategy for inventory management where a constant quantity of an item is ordered whenever stock falls to a predetermined level.

Financial Aspect

The monetary considerations and implications involved in a decision, investment, or the overall financial health of an organization.