Objective 2.2 Detect Attacks Using Active Monitoring Systems. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A network monitoring system is generating a large number of alerts for traffic to a known software update server. The traffic is legitimate and expected. The security team wants to reduce these false positives without losing visibility into other suspicious traffic. What should the team do?

   • AIncrease the sensitivity of the monitoring rules.
   • BBlock all traffic to the software update server.
   • CAdd the software update server's IP address to the whitelist in the monitoring system.
   • DDisable all alerts for outbound traffic.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which of the following is a key capability of a CASB for monitoring cloud services?

   • AVisibility into shadow IT usage of cloud applications
   • BReal-time blocking of all network traffic
   • CManaging on-premises server patches
   • DReplacing the need for endpoint security
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   When a new file is created in a directory monitored by FIM, what does the FIM typically do?

   • AIt adds the file to a whitelist.
   • BIt automatically deletes the new file.
   • CIt generates an alert about the new file.
   • DIt ignores the file until it is modified.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is the primary role of Zeek in network security?

   • ATo block malicious traffic in real time
   • BTo scan endpoints for malware
   • CTo manage firewall rules
   • DTo analyze network traffic and produce detailed logs of activity
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is the purpose of FIM reports?

   • ATo optimize disk space usage
   • BTo provide a summary of file changes for compliance and auditing
   • CTo update antivirus signatures
   • DTo configure network firewall rules
   Reveal Solution Discussion Select an answer first