Which term describes the group primarily responsible for monitoring and protecting assets in real time?

Which term describes the group primarily responsible for monitoring and protecting assets in real time?

• A. Computer Incident Response Team
• B. Security Operations Center
• C. Information Security Officer
• D. Development and Operations

Answer: (B)

Real-time monitoring and protection of assets requires a dedicated, 24/7 centralized function that watches for security events, correlates data from multiple sources, and coordinates rapid response. The Security Operations Center embodies this role: it is a focused team and facility that continuously monitors networks, endpoints, and applications using tools like SIEM, IDS/IPS, and EDR, prioritizes alerts, and leads incident detection and containment efforts to protect assets as events unfold. The other options describe different purposes. A Computer Incident Response Team focuses on handling and investigating incidents after they occur, rather than ongoing monitoring. An Information Security Officer is a governance role focused on strategy, policy, and risk management. Development and Operations centers on delivering and maintaining software and infrastructure, not primarily on real-time security monitoring.

Real-time monitoring and protection of assets requires a dedicated, 24/7 centralized function that watches for security events, correlates data from multiple sources, and coordinates rapid response. The Security Operations Center embodies this role: it is a focused team and facility that continuously monitors networks, endpoints, and applications using tools like SIEM, IDS/IPS, and EDR, prioritizes alerts, and leads incident detection and containment efforts to protect assets as events unfold.

The other options describe different purposes. A Computer Incident Response Team focuses on handling and investigating incidents after they occur, rather than ongoing monitoring. An Information Security Officer is a governance role focused on strategy, policy, and risk management. Development and Operations centers on delivering and maintaining software and infrastructure, not primarily on real-time security monitoring.