4.4 Explain the Creation and Configuration Process for Cloud Detection and Response (CDR) and Threat Management CLOUD-SECURITY-ENGINEER Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which detection rule type would be most appropriate for detecting a previously unknown threat that does not match any known indicators or behavioral patterns?

   • AIOC rule
   • BBIOC rule
   • CCorrelation rule
   • DAnalytic rule
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is the primary purpose of an automation playbook in CDR?

   • ATo analyze network traffic for anomalies
   • BTo orchestrate response actions when a threat is detected
   • CTo store threat intelligence feeds
   • DTo define the conditions for a detection rule
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What happens when a detection rule with an associated playbook triggers in CDR?

   • AThe playbook is queued for manual approval by an analyst
   • BThe playbook is automatically executed to perform response actions
   • CThe playbook is sent to the security team as a notification
   • DThe playbook is disabled until an analyst enables it
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the first step in creating a detection rule in CDR?

   • ADefine the rule conditions
   • BSelect the rule type
   • CTest the rule with sample data
   • DConfigure the action to take when the rule triggers
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A security engineer is creating an IOC rule in CDR to detect a known malicious file hash. After defining the condition that matches the file hash, what is the next step in the rule creation process?

   • ATest the rule in a sandbox environment
   • BDefine the action to take when the condition is met
   • CCreate a new automation playbook
   • DSet the rule severity to critical
   Reveal Solution Discussion Select an answer first