Asset and Network Analytics GCDA Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which technique for asset discovery involves sending probes to network ranges to elicit responses from devices, thereby identifying active hosts?

   • AVulnerability scanning
   • BActive discovery
   • CPassive discovery
   • DLog aggregation
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary goal of anomaly detection in network security?

   • ATo automatically patch vulnerabilities
   • BTo enforce password complexity
   • CTo replace the need for antivirus software
   • DTo detect deviations from the baseline that may indicate security incidents
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   An analyst is reviewing the network segmentation of a manufacturing facility. The facility has an OT network that controls production lines and an IT network for business operations. The analyst discovers that the OT network has a direct route to the IT network through a legacy switch that was not documented. The OT network contains safety-critical systems that cannot tolerate downtime. What is the most appropriate action?

   • ALeave the path in place because it has been there for years and no incident has occurred.
   • BImmediately disconnect the legacy switch to enforce segmentation.
   • CAdd a firewall rule to block traffic between the two networks, but do not remove the physical path.
   • DDocument the undocumented path, assess the risk, and develop a plan to remove the path during a scheduled maintenance window.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   An organization is establishing a network baseline for a new cloud-based application. The application's traffic is highly variable, with spikes during marketing campaigns and quiet periods otherwise. The analyst must set up anomaly detection. What is the most appropriate approach?

   • ADisable anomaly detection during marketing campaigns to avoid false positives.
   • BUse a dynamic baseline that adjusts for time-of-day and known events such as marketing campaigns.
   • CUse a static baseline based on the average traffic over the first month.
   • DSet a high threshold so that only extreme spikes trigger alerts.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the primary purpose of maintaining an asset inventory in a security operations context?

   • ATo automatically patch all systems
   • BTo replace the need for network monitoring
   • CTo provide a complete and current list of hardware, software, and virtual components for security monitoring and incident response
   • DTo track employee productivity
   Reveal Solution Discussion Select an answer first