[&] What is the primary purpose of escalation in security operations?
- Ensuring complex incidents are addressed by more experienced analysts -- Correct
- To delay the handling of security events until more information is available
- To ensure all incidents receive the same level of attention regardless of severity
- To involve as many individuals as possible in the incident response process

[&] What role do communication protocols play in the escalation process?
- It Improves detection accuracy by sharing threat intelligence
- It ensures that only internal SOC teams are aware of the incident
- It defines who needs to be informed and what information is shared during escalation -- Correct
- It standardizes the way SOC analysts use different communication tools

[&] Why is having defined roles and responsibilities important in incident communication?
- It allows analysts to bypass standard procedures in urgent situations
- It prevents the need for technical training in communication tools
- It removes the need for escalation in the SOC
- It ensures that communication is consistent and follows a proper chain of command -- Correct

[&] What is a key benefit of having standardized communication channels in a SOC?
- They allow all team members to use their preferred communication tools
- They guarantee that escalations are always visible to the general public
- They create a consistent approach for notifying team members of escalated incidents -- Correct
- They ensure messages are communicated quickly without any confidentiality

[&] What is the importance of confidentiality in communication protocols?
- To allow only external stakeholders to access sensitive information
- To ensure sensitive information is shared via public channels
- To restrict the sharing of sensitive information to authorized individuals only -- Correct
- To ensure that all information is shared with as many personnel as possible