Question 64
Main Page
A large number of alerts are overwhelming your SOC. What risk treatment approach might help reduce this noise while maintaining coverage?
A. Accept the risk
B. Eliminate all alerts
C. Tune controls and apply compensating controls where applicable
D. Increase staff only
Answer: C. Tune controls and apply compensating controls where applicable
Using more efficient, context-aware controls can reduce alert fatigue while preserving protection levels.