Defensive Technologies and Emerging Intelligence GISF Practice Questions (Page 11)

Questions 51–54

1. 51foundation · easy

   Which of the following is a typical capability of a SIEM system?

   • AAutomatic patching of operating systems
   • BEncrypting network traffic between data centers
   • CCreating user accounts and assigning permissions
   • DReal-time correlation of security events from different sources
   Reveal Solution Discussion Select an answer first
2. 52application · medium

   A company is implementing a new access control policy for its cloud-based applications. The policy requires that users authenticate using a password and a one-time code from a mobile app, and that their access rights are limited to the minimum necessary for their role. Which two concepts are being applied?

   • ASingle sign-on and role-based access control.
   • BAccounting and auditing.
   • CMulti-factor authentication and least privilege.
   • DEncryption and access control lists.
   Reveal Solution Discussion Select an answer first
4. 53application · medium

   A company's endpoint protection platform (EPP) uses signature-based detection and has been missing new ransomware variants. The security team wants to improve detection of unknown malware without relying solely on signatures. Which additional capability would best address this gap?

   • AIncrease the frequency of signature updates to every hour.
   • BReplace the EPP with a host-based firewall.
   • CEnable behavioral analysis and machine learning on the EPP to detect suspicious activity patterns.
   • DDisable the EPP on endpoints that run only trusted applications.
   Reveal Solution Discussion Select an answer first
5. 54foundation · easy

   Which of the following is an example of an open source intelligence (OSINT) source?

   • APublicly available social media posts
   • BConfidential government reports
   • CA private threat feed from a commercial vendor
   • DInternal network logs
   Reveal Solution Discussion Select an answer first