Objective 2.2 Detect Attacks Using Active Monitoring Systems. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   Which of the following is an example of a whitelist entry in network monitoring?

   • AA suspicious port scan source
   • BAn unapproved cloud storage service
   • CA trusted vendor's update server IP address
   • DA known malicious domain
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   What is the primary function of a Security Information and Event Management (SIEM) system in active monitoring?

   • ATo replace antivirus software on endpoints
   • BTo block malicious network traffic in real time
   • CTo collect and correlate logs from multiple sources to detect attacks
   • DTo provide a single source of threat intelligence feeds
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   Which detection method used by IDS/IPS systems compares network traffic against a database of known attack patterns?

   • ABehavioral analysis
   • BSignature-based detection
   • CHeuristic analysis
   • DAnomaly-based detection
   Reveal Solution Discussion Select an answer first
5. 44foundation · easy

   Which active monitoring solution is specifically designed to enforce security policies and provide visibility into sanctioned and unsanctioned cloud applications used by an organization?

   • ACASB
   • BSIEM
   • CTIP
   • DEDR
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   What is the primary purpose of network traffic monitoring for security?

   • ATo increase network speed
   • BTo replace the need for firewalls
   • CTo manage user passwords
   • DTo identify and analyze suspicious activity within network communications
   Reveal Solution Discussion Select an answer first