SoC Analyst Important Interview Questions and Answers

[@ayindeperouza7703]

Thanks for the information above and never apologize for who you are (your voice).

[@jenniferbrook1720]

Thank you for this, im a level 2 support rep preparing for my first threat & vulnerability interview

[@spidermc]

Incredible thanks

[@okorhan.khalilpoorazer8526]

this video was excellent!

[@danielsiegler]

can you answer me this question how would you do it?
. Employees reporting on suspicious email allegedly from the corporate InfoSec
department instructing them to enter a link and change their password.
 What could be the risks and potential impact in such case?
 Write the investigation process, hypothetic findings and conclusions
 What would be your recommended containment action plan?
 What would be your recommended recovery plan?
Local IT in Spain are complaining on a massive files corruption in few shared
folders, they mentioned there is a strange suffix added to all files. The files can't
be open no more by anyone.
 Write what can these symptoms imply on
 What would be your recommended investigation plan to confirm/confute
your original assumption and to find the root cause for the incident?
 What would be your recommended containment action plan?
 What would be your recommended recovery plan?
Its for my exam and I want to compare to someone with experience