CySA Module 8 - Security Operations

Sakura, a cybersecurity analyst, is implementing SCAP for her organization. She wants to implement best practices for the configuration of settings on various computer systems. Which of the following might she use to meet her goal?

• CVE

• CCE

• CPE

• CWE

Clifford, a cybersecurity analyst, has been tasked with implementing a method of automating vulnerability management at his organization. Which of the following is the most likely solution that Clifford would choose to implement?

• AVMP

• SCAP

• SCP

• PAM

Zofia is a cybersecurity analyst for an airline. As part of her day-to-day responsibilities, she needs to ensure that she is cognizant of the same types of threats that other airlines face when analyzing her company's infrastructure. Which of the following should she ensure that she is doing?

• Creating APIs

• Creating APTs

• ETL

• Data enrichment

Maricel works as a development manager for a large organization. She wants to automate as much of the process of making modifications to existing code and pushing them out to the production environment as she possibly can. Which of the following should she learn more about and implement?

• Continuous integration

• Continuous production

• Continuous deployment

• Continuous delivery

Determine when there are anomalies and abnormalities. Which of the following features should he look for in the feature set when looking for a new system to implement?

• Machine learning

• Zero false positives

• Continuous delivery

• Augmented reality

Sanvi is a cybersecurity analyst at her company and has been asked to review a new platform that will combine software programs and tools in order to orchestrate a range of security operations, threat intelligence sources, as well as incident response mechanisms all into one. Which of the following has she been asked to review?

• KALI

• SOAR

• TRIP

• SUSE

Security orchestration, automation, and response is a platform that combines software programs and tools in order to orchestrate a range of security options, threat intelligence sources, and incident response mechanisms. Which of the following is a distribution of Linux that includes a number of software programs and tools, but does not in and of itself provide the orchestration and workflows that SOAR systems do?

• KALI Linux

• TRIP

• SUSE

Yael is wanting to automate a set of tasks on several of his Linux servers to run certain security tools in sequence. He asks if you have any knowledge on which programming language might be best to learn in order to script out some of these tasks. Which of the following would you recommend that he learn?

• Python

• Toledo

• Swank

• Blur

Manon is working on developing a strategy for protecting certain assets that fall into the same level of criticality. He wants to ensure that resources are prioritized and focused on those assets where the biggest negative impact would be realized by the organization if they were compromised. Which of the following should he consider?

• Installing a host-based firewall on each of these systems

• Bundling critical assets behind the same set of firewalls and other security devices and platforms

• Enacting a policy where all resources of this nature should be kept on-premises due to the criticality of their data

• Air gapping these systems

What might he do after determining the extent and basic configuration of the infrastructure?

• Create a Disaster Recovery Plan to establish which resources are the most critical.

• Determine a budget for necessary upgrades and security devices.

• Establish new policies such as a password policy, acceptable usage policy, etc.

• Establish a hypothesis about the specific threats that may be present and how they can be identified.