What is the goal of alert tuning?

To reduce false positives while maintaining detection of real threats

To increase the number of alerts generated

How is a network traffic baseline typically established?

By simulating an attack to observe the response

By analyzing traffic only during peak hours

By using the vendor's default configuration

By observing traffic over a period of normal operation

Which technique is commonly used to detect anomalies in network traffic?

Disabling all non-essential services

Using only signature-based detection

Statistical analysis of traffic patterns

Information Systems Security Management Professional

Domain 4Objective 2

4.2 Establish and Maintain Threat Intelligence Program ISSMP Practice Questions (Page 2)

Part of the Security Operations domain, which accounts for 18% of the ISSMP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~13–22 in this domain), expect 4–7 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

15concepts

18%of the exam

15 Concepts in This Objective

Threat intelligence sources
Threat data aggregation
Baseline analysis of network traffic
Baseline analysis of data
Baseline analysis of user behavior
Anomaly detection techniques
Anomaly analysis and investigation
Threat modeling methodologies
Threat modeling process
Attack classification
Attack categorization frameworks
Security event correlation
Correlation rules and tools
Actionable alert definition
Alert tuning and prioritization

Questions 6–10

6foundation · easy
What is the goal of alert tuning?
Select an answer first
7foundation · easy
Which attack type relies on tricking users into revealing sensitive information?
Select an answer first
8foundation · easy
Which framework provides a knowledge base of adversary tactics and techniques based on real-world observations?
Select an answer first
9foundation · easy
How is a network traffic baseline typically established?
Select an answer first
10foundation · easy
Which technique is commonly used to detect anomalies in network traffic?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSMP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSMP” is a trademark of its owner, used for identification only.

4.2 Establish and Maintain Threat Intelligence Program ISSMP Practice Questions (Page 2)

Questions 6–10

What is the goal of alert tuning?

Which attack type relies on tricking users into revealing sensitive information?

Which framework provides a knowledge base of adversary tactics and techniques based on real-world observations?

How is a network traffic baseline typically established?

Which technique is commonly used to detect anomalies in network traffic?

Keep studying — Security Operations