Question

A newly hired security analyst has joined an established SOC team. Not long after going through corporate orientation, a new attack method on webbased applications was publicly revealed. The security analyst immediately brings this new information to the team lead, but the team lead is not concerned about it.

Which of the following is the MOST likely reason for the team lead’s position?

A. The organization has accepted the risks associated with web-based threats.

B. The attack type does not meet the organization’s threat model.

C. Web-based applications are on isolated network segments.

D. Corporate policy states that NIPS signatures must be updated every hour

PLEASE INCLUDE AN EXPLANATION

Answer 1

Answer –

Hence, the answer would be A, that is, The organization has accepted the risks associated with web-based threats.

Explanation –

A SOC (Security Operations Center) is a unit made to deal with issues of security in the organization which consists of experts like security manager, security engineer, etc.

In this scenario, a hired security analyst is new and the information which he shared with the team lead is already known to the team lead and the measures were already taken. Since the team lead already know what is the issue, because he has more experience than the newly hired security analyst, the team lead in not concerned