A SOC analyst is overwhelmed by thousands of daily alerts from the SIEM, most of which are triggered by a routine backup job that connects to multiple internal servers each night. Legitimate threats are being missed in the noise. Which activity should the analyst perform to reduce these unnecessary alerts while preserving detection of genuine threats?

🔥 3-day streak

CompTIA Security+ (SY0-701)56 / 77

Question 56 of 77

A SOC analyst is overwhelmed by thousands of daily alerts from the SIEM, most of which are triggered by a routine backup job that connects to multiple internal servers each night. Legitimate threats are being missed in the noise. Which activity should the analyst perform to reduce these unnecessary alerts while preserving detection of genuine threats?

Reviewed for accuracy · Report an issueNext question →