2.2 Describe Security Monitoring and Telemetry Technologies 350-701 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · medium

   Which component is essential for a security monitoring solution to provide early warning of potential security incidents?

   • AA firewall with default-deny rules
   • BA VPN for remote access
   • CA backup solution for data recovery
   • DA baseline of normal behavior to compare against
   Reveal Solution Discussion Select an answer first
2. 12foundation · medium

   Which of the following is an example of an indicator of compromise (IOC) commonly found in a threat intelligence feed?

   • AA device's serial number
   • BA user's password hash
   • CA network diagram
   • DA malicious IP address
   Reveal Solution Discussion Select an answer first
4. 13foundation · medium

   Which factor is most important to consider when designing a monitoring architecture for a large enterprise?

   • AScalability to handle the volume of telemetry data
   • BThe brand of the network switches
   • CThe number of employees in the security team
   • DThe color of the monitoring dashboard
   Reveal Solution Discussion Select an answer first
5. 14foundation · medium

   What is the primary purpose of a SOAR platform in security monitoring?

   • ATo replace the need for a SIEM
   • BTo integrate telemetry from multiple tools and automate response actions
   • CTo generate threat intelligence feeds
   • DTo provide a physical appliance for packet capture
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company has multiple security tools generating logs: firewalls, IDS, VPN concentrators, and endpoint agents. The security team wants to detect multi-stage attacks that span multiple devices, such as a phishing email leading to a malicious download and then lateral movement. Which technology should they use to aggregate and correlate these diverse logs?

   • AThreat intelligence feed
   • BNetFlow collector
   • CSecurity Information and Event Management (SIEM)
   • DSNMP management station
   Reveal Solution Discussion Select an answer first