3.6 Determine Known Indicators of Compromise (IOCs) and Indicators of Attack (IOAs) 350-201 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   How are Indicators of Attack (IOAs) typically used in threat detection?

   • ABy matching static artifacts like file hashes against system data
   • BBy analyzing behavioral patterns and sequences of actions
   • CBy comparing system configurations to security baselines
   • DBy scanning for known vulnerability signatures
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary difference between an Indicator of Compromise (IOC) and an Indicator of Attack (IOA)?

   • AIOCs are used for prevention, while IOAs are used for recovery
   • BIOCs are always network-based, while IOAs are always host-based
   • CIOCs are generated by attackers, while IOAs are generated by defenders
   • DIOCs are evidence of a compromise that has occurred, while IOAs indicate active attack behavior
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following is a common type of Indicator of Compromise (IOC)?

   • APrivilege escalation attempts
   • BFile hashes
   • CUnusual login patterns
   • DLateral movement
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   How can correlating IOCs and IOAs improve threat detection?

   • ABy providing both evidence of compromise and context of ongoing attack behavior
   • BBy replacing the need for human analysis
   • CBy eliminating the need for threat intelligence feeds
   • DBy making all alerts automatically true positives
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following is a common type of Indicator of Attack (IOA)?

   • AAn unusual login pattern
   • BA registry key modification
   • CA file hash of known malware
   • DA malicious domain name
   Reveal Solution Discussion Select an answer first