In this part, suppose that you are hired as a security consultant for a corporate (XYZ.COM). The Security Operations Center (SOC) belonging to the company is hosted on-premises and consists of the below existing elements:

• SRV-1: SIEM Server
• SRV-2: Vulnerability Assessment Server
• FW-IPS1: Network Security devices
• Anti-Virus Agents: Endpoint protection agents
• SYSLOG Agents: Logging agents installed on Servers

As a security consultant, you should propose convenient configuration and SOC design. Answer the following:

1. Which SOC role is more concerned with element FW-IPS1? Give an example of a relevant task associated with this role. (2 marks)