Which of the following formula is used to calculate the EPS of the organization?
A.
EPS = average number of correlated events / time in seconds
B.
EPS = number of normalized events / time in seconds
C.
EPS = number ofsecurity events / time in seconds
D.
EPS = number of correlated events / time in seconds
The Answer Is:
D
This question includes an explanation.
Explanation:
In the context of a Security Operations Center (SOC), EPS typically refers to “Events Per Second,” which is a measure of the number of security events processed in one second. The correct formula for calculating EPS in a SOC environment is the number of correlated events divided by the time in seconds. Correlated events are those that have been analyzed and aggregated by the SOC’s security information and event management (SIEM) system, indicating a potential security incident. This metric helps in understanding the operational load and performance of the SOC.
[References: The information is aligned with the EC-Council’s Certified SOC Analyst (CSA) course material and best practices, which emphasize the importance of understanding and managing SOC operational metrics such as EPS for effective security monitoring and incident response12., , , , , ]
312-39 PDF/Engine
Printable Format
Value of Money
100% Pass Assurance
Verified Answers
Researched by Industry Experts
Based on Real Exams Scenarios
100% Real Questions
Get 65% Discount on All Products,
Use Coupon: "ac4s65"