Adaptive Threat Profiling JN0-336 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is the primary purpose of configuring adaptive threat profiling policies?

   • ATo define what constitutes normal behavior and how to respond to anomalies
   • BTo replace the need for any other security controls
   • CTo manually approve every network connection
   • DTo disable all security features except for basic logging
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A security analyst is reviewing a profiling report that shows a steady increase in the number of alerts over the past month. The analyst suspects that the baseline is outdated. What is the best action to take?

   • AIgnore the increase because profiling always generates more alerts over time.
   • BIncrease the alert threshold to reduce the number of alerts.
   • CReview the baseline update frequency and consider resetting the baseline to reflect current behavior.
   • DDisable profiling for all users to stop the alerts.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the primary purpose of adaptive threat profiling reports and alerts?

   • ATo store raw network packets for forensic analysis
   • BTo automatically block all network traffic
   • CTo provide visibility into detected anomalies and support security assessment
   • DTo replace the need for security analysts
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   After data collection, what is the next step in the adaptive threat profiling process?

   • AAnalyzing the collected data to identify patterns and anomalies
   • BImmediately blocking all flagged traffic
   • CUpdating the signature database
   • DSending alerts to the security team
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   How does adaptive threat profiling use behavioral analysis to detect anomalies?

   • ABy requiring manual review of all network logs
   • BBy matching traffic against a list of known malicious IP addresses
   • CBy scanning files for known malware signatures
   • DBy comparing current traffic to a baseline of normal behavior and flagging significant deviations
   Reveal Solution Discussion Select an answer first