Eccouncil 312-39 Exam - Topic 9 Question 1 Discussion

Actual exam question for Eccouncil's 312-39 exam

Question #: 1
Topic #: 9

Charline is working as an L2 SOC Analyst. One day, an L1 SOC Analyst escalated an incident to her for further investigation and confirmation. Charline, after a thorough investigation, confirmed the incident and assigned it with an initial priority.

What would be her next action according to the SOC workflow?

AShe should immediately escalate this issue to the management

BShe should immediately contact the network administrator to solve the problem

CShe should communicate this incident to the media immediately

DShe should formally raise a ticket and forward it to the IRT

Show Suggested Answer

Suggested Answer: B

by Jani at May 04, 2022, 01:01 AM

Limited Time Offer

25%

Off

Get Premium 312-39 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jacquelyne

7 months ago

Are we sure she shouldn't just call the network admin first? Feels like a big decision.

upvoted 0 times

...

Latricia

7 months ago

Isn't it surprising how many people skip the ticketing step?

upvoted 0 times

...

Stefan

7 months ago

Escalating to management seems a bit much for this stage.

upvoted 0 times

...

Scot

8 months ago

Definitely not contacting the media, that's just wrong.

upvoted 0 times

...

Malcolm

8 months ago

I think she should raise a ticket for the IRT. That's standard procedure.

upvoted 0 times

...

Steffanie

8 months ago

I’m pretty certain that raising a ticket is the right move, but I wonder if there are any exceptions where she might need to escalate it first.

upvoted 0 times

...

Veronika

8 months ago

I feel like contacting the network admin directly could be a possible action, but it seems more like something the IRT would handle.

upvoted 0 times

...

Val

8 months ago

I remember practicing a similar question, and I think escalating to management might be too early at this stage.

upvoted 0 times

...

Dalene

8 months ago

I think after confirming the incident, she should raise a ticket and forward it to the IRT, but I'm not entirely sure if that's the only step.

upvoted 0 times

...

Kenneth

8 months ago

This looks like a straightforward question about creating a message with voting buttons. I think I can handle this one.

upvoted 0 times

...

Elenor

8 months ago

Hmm, I'm not sure about the Selenium IDE. Is that really necessary for this task, or is it just an optional tool? I'll have to research that one a bit more.

upvoted 0 times

...

Dannie

8 months ago

I remember that days' sales in receivables relate to how quickly a company collects its receivables, but I'm not sure if it's the right formula for average gross balance.

upvoted 0 times

...

Lauran

8 months ago

Hmm, I'm a little unsure about this one. I'll need to re-read the question carefully and think through the different options before deciding.

upvoted 0 times

...

Xenia

8 months ago

This is a good one. I think the key is to remember that we need both incoming and outgoing connectivity. So we'll need to set up an internet gateway and configure the route table accordingly. The other options seem like they might be distractions, but I'll double-check my understanding.

upvoted 0 times

...

Hildred

8 months ago

Ah, I see what they're getting at. Time out can be a useful tool, but it requires close monitoring and supervision to ensure it's not misused. I'll make sure to choose the option that emphasizes the need for careful implementation.

upvoted 0 times

...