Questions
Review the following questions to test your knowledge of this subject:
- What are the two main types of roles within an SOC?
- Which role carries out the scenario-mapping exercise?
- How frequently should you check the log ingestion rate and pricing tier?
- How often should an SOC analyst check the Incidents page?
- If you, as an SOC engineer, are told that a new project using an Azure SQL instance is just starting, when should you start ingesting its logs?