Module Quiz

8 questions · Pass at 80%

Question 1 of 8

A SOC has a tiered model with L1, L2, and L3. MTTD is consistently 6 hours despite the SIEM firing alerts within 5 minutes of incidents. What is the most likely root cause?