Security Operations

Multiple Choice

What is the first step in the incident response lifecycle?

• Preparation

• Identification

• Recovery

• Containment

Multiple Choice

Which tool alerts you to unusual network activity?

• NAC

• Firewall

• VPN

• SIEM

Multiple Choice

What is the goal of containment in incident response?

• Remove the threat

• Recover data

• Analyze the incident

• Limit the impact

Multiple Choice

What does threat hunting involve?

• Reacting to alerts

• Analyzing known threats

• Proactively searching for threats

• Restoring systems

Multiple Choice

What is the first step in digital forensics?

• Reporting

• Examination

• Collection

• Analysis

Multiple Choice

What is the main goal of digital forensics?

• Eradicate threats

• Prevent incidents

• Investigate and analyze incidents

• Perform backups

Multiple Choice

Disaster Recovery and Business Continuity

• estore Time Objective

• Recovery Test Objective

• Response Time Objective

• Recovery Time Objective

Multiple Choice

What does a BCP ensure?

• No data loss

• Continuous operations

• System recovery

• Incident detection

Multiple Choice

What is the function of NAC?

• Encrypt data

• Control network access

• Monitor traffic

• Block viruses

Multiple Choice

What does SOAR automate?

• Threat response

• Network routing

• Data backup

• User logins

Multiple Choice

What does change management prevent?

• Data loss

• Network traffic

• System downtime

• Unauthorized changes

Multiple Choice

What is the purpose of regular audits?

• Check compliance

• Backup data

• Prevent breaches

• Install patches