Cyber OPS Quiz

Which two services are provided by security operations centers?

(Choose two.)

Which personnel in a SOC is assigned the task of verifying whether an alert triggered by monitoring software represents a true security incident?

Users report that a database file on the main server cannot be accessed. A database administrator verifies the issue and notices that the database file is now encrypted. The organization receives a threatening email demanding payment for the decryption of the database file. What type of attack has the organization experienced?

Which transport layer feature is used to guarantee session establishment?

A user is curious about how someone might know a computer has been infected with malware. What are two common malware behaviors?

(Choose two.)

Which SIEM function is associated with speeding up detection of security threats by examining logs and events from different systems?

Which capability is provided by the aggregation function in SIEM?

What three items are components of the CIA triad?

(Choose three.)

Which statement describes the term iptables?

What is the tool that has alert records linked directly to the search functionality of the Enterprise Log Search and Archive (ELSA)?