SOC › Module 6 › Lesson 5
Quiz — Triage
APPLY: triage process, FP vs TP, enrichment; $SOC_LAB sample alerts only.
Opening
Alert triage judgment.
Name triage workflow and dispositions — refuse unauthorized SIEM and attack-generated alerts.
Knowledge Check
Triage literacy uses:
Multiple choice
Knowledge Check
True or False: Querying stranger SIEM without authorization is lab.
True or False
Knowledge Check
Triage process includes:
Multiple choice
Knowledge Check
FP-Benign means:
Multiple choice
Knowledge Check
True or False: Running attacks to get TP alerts is lab.
True or False
Knowledge Check
Enrichment layers include:
Multiple choice
Knowledge Check
TP disposition requires:
Multiple choice
Knowledge Check
True or False: IOC scanning of stranger infra is enrichment lab.
True or False
Knowledge Check
FP-Tuning indicates:
Multiple choice
Knowledge Check
Next:
Multiple choice
Answer all 10 knowledge checks to continue. (0/10 answered)