Detection and Analysis CCOA Practice Questions (Page 6)

Questions 26–28

1. 26foundation · easy

   Which of the following is an example of tactical threat intelligence?

   • AA detailed analysis of a malware family's code
   • BA list of malicious IP addresses and domains used in recent campaigns
   • CA summary of the organization's security posture
   • DA report on the geopolitical motivations of a nation-state actor
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is the primary purpose of analyzing network flow data (e.g., NetFlow) in security monitoring?

   • ATo replace the need for firewall logs
   • BTo identify communication patterns and anomalies at a high level
   • CTo decrypt encrypted traffic
   • DTo inspect the payload of individual packets
   Reveal Solution Discussion Select an answer first
3. 28foundation · easy

   What is the primary purpose of a detection use case in security monitoring?

   • ATo store historical security data for compliance purposes
   • BTo provide a user manual for the SIEM platform
   • CTo document the steps of an incident response plan
   • DTo translate a threat scenario into a specific monitoring and alerting rule
   Reveal Solution Discussion Select an answer first