1.2 Compare Security Deployments 200-201 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A security operations center (SOC) receives logs from firewalls, endpoints, and authentication servers. Analysts are overwhelmed by the volume of alerts and are missing critical incidents. The SOC manager wants a tool that can aggregate these logs, correlate events across sources, and generate alerts for suspicious activity. Which tool should the manager deploy?

   • AA log management tool that only stores and indexes logs
   • BA Security Orchestration, Automation, and Response (SOAR) platform
   • CAn endpoint detection and response (EDR) console
   • DA Security Information and Event Management (SIEM) system
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company is deploying a containerized application in a Kubernetes cluster. The security team must ensure that container images are free of known vulnerabilities and that the application is protected from web-based attacks. However, the team has limited resources and cannot implement all possible controls. Which control should be prioritized to address the most critical risk?

   • AImage scanning for known vulnerabilities before deployment
   • BWeb application firewall (WAF) in front of the application
   • CNetwork policies to restrict pod-to-pod communication
   • DRuntime security monitoring with anomaly detection
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What detection technique does modern antimalware use to identify previously unknown malware by analyzing its behavior?

   • ANetwork packet inspection
   • BFile hashing
   • CBehavioral analysis
   • DSignature matching
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   How do secure coding practices help protect software from attacks?

   • ABy preventing the introduction of vulnerabilities during development
   • BBy encrypting the source code so attackers cannot read it
   • CBy eliminating all vulnerabilities from the software
   • DBy monitoring runtime traffic for malicious activity
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company is deploying a critical application in a public cloud IaaS environment. The security team must ensure that only specific users can access the management console, that the application's virtual machines are not exposed to the internet, and that data is encrypted at rest. The team has a limited budget and must choose the most efficient set of controls. Which set of controls should the team implement?

   • AA SOAR platform, an EDR solution, and a container image scanner
   • BIAM policies for the management console, security groups to restrict VM traffic, and storage encryption
   • CA network firewall, a host-based IDS, and a log management tool
   • DA VPN for remote access, a WAF for the application, and a SIEM for monitoring
   Reveal Solution Discussion Select an answer first