Skip to main content
ITPrepCerts
Login
Exams Free Samples About Contact
Login Create an account

312-39 Certified SOC Analyst v2

  • Eccouncil
  • 5 free sample questions

About this exam

312-39 is the Eccouncil exam Certified SOC Analyst v2. Paid practice material for this exam is not available yet, but you can try its free sample questions.

Exam code
312-39
Vendor
Eccouncil
Practice questions
Not available yet
Free sample questions
5
Question bank last updated
Not available yet

Try 2 sample questions

Taken from the free sample set for 312-39.

Question 1

Which of the following steps of incident handling and response process focus on limiting the scope and extent of an incident?

  1. Option A:

    Containment

  2. Option B:

    Data Collection

  3. Option C:

    Eradication

  4. Option D:

    Identification

Show answer and explanation

Correct answer: A

The step in the incident handling and response process that focuses on limiting the scope and extent of an incident is  Containment . This phase aims to isolate affected systems to prevent the spread of the incident and to minimize its impact. Containment strategies may involve disconnecting affected systems from the network, blocking malicious traffic, or taking systems offline.  The goal is to contain the incident quickly to reduce damage and to maintain business operations 1 .

[References: The EC-Council’s Certified Incident Handler (E|CIH) program outlines the incident handling and response process, which includes the containment phase as a critical step. The program provides knowledge and skills necessary to effectively manage and mitigate cybersecurity incidents1, , , ]

Question 2

You are a SOC analyst at a leading financial institution tasked with developing a comprehensive threat model to safeguard critical assets: sensitive customer data, online banking applications, and real-time payment processing systems. The organization has observed increased targeted attacks on financial entities, including credential theft, account takeovers, and sophisticated phishing. Senior management is concerned about long-term financial and reputational damage. You need intelligence providing insights into high-level risks, geopolitical threats, and emerging cybercriminal strategies with long-term implications for security posture. Which type of threat intelligence are you seeking?

  1. Option A:

    Strategic threat intelligence

  2. Option B:

    Technical threat intelligence

  3. Option C:

    Tactical threat intelligence

  4. Option D:

    Operational threat intelligence

Show answer and explanation

Correct answer: A

Strategic threat intelligence is aimed at executive and program-level decision-making. It focuses on high-level risk trends, geopolitical drivers, adversary motivations, target selection, and emerging threat landscapes that influence long-term security posture and investment priorities. The question emphasizes senior management concerns, long-term implications, and broad risks affecting financial institutions—hallmarks of strategic intelligence. Technical intelligence is focused on specific indicators (IPs, domains, hashes) and technical artifacts for immediate detection. Tactical intelligence focuses on adversary tactics, techniques, and procedures (TTPs) that help defenders improve detections and controls. Operational intelligence is more immediate, relating to current campaigns, adversary capabilities, and near-term targeting information used for active defense and incident response. While tactical and operational intelligence are valuable for SOC detections and playbooks, the requirement here is “high-level risks and long-term implications,” which maps most directly to strategic threat intelligence.

See all 5 free sample questions