4.4 Explain the Creation and Configuration Process for Cloud Detection and Response (CDR) and Threat Management CLOUD-SECURITY-ENGINEER Practice Questions (Page 7)

Questions 31–32

1. 31foundation · easy

   Which detection rule type in CDR matches events against a known list of malicious file hashes, IP addresses, or domains?

   • ACorrelation rule
   • BAnalytic rule
   • CBIOC rule
   • DIOC rule
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   A correlation rule in CDR is configured to trigger an alert when a user logs in from a new location and then performs a privileged action within 10 minutes. What is the correlation rule doing in this scenario?

   • AUsing a machine learning model to score the risk of the login
   • BDetecting a behavioral pattern that deviates from a baseline
   • CMatching a static indicator like an IP address
   • DAggregating and analyzing multiple events to detect a suspicious sequence
   Reveal Solution Discussion Select an answer first