5.5 Explain Behavioral Threat Prevention CYBERSECURITY-PRACTITIONER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the primary purpose of behavioral threat prevention in endpoint security?

   • ATo block known malware by matching file hashes against a signature database
   • BTo identify and stop threats by analyzing the actions and activities of processes and users
   • CTo encrypt all data on the endpoint to prevent unauthorized access
   • DTo provide a virtual private network connection for remote users
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company wants to improve its endpoint security posture by adding a layer that can detect unknown, zero-day threats that evade traditional signature-based antivirus. They already have a firewall and an EDR solution. What is the primary role of behavioral threat prevention in this layered defense?

   • ATo provide a manual review queue for all endpoint alerts
   • BTo monitor endpoint activities and detect malicious behaviors that static signatures miss
   • CTo replace the firewall and EDR solutions entirely
   • DTo block all network traffic from unknown IP addresses
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which behavioral threat detection mechanism uses algorithms to learn patterns of malicious behavior from large datasets?

   • AHeuristics
   • BSandboxing
   • CMachine learning
   • DSignature-based detection
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is a typical automated response triggered by behavioral threat prevention when a malicious behavior is detected?

   • AIsolating the affected endpoint from the network
   • BRebooting the endpoint immediately
   • CDisabling the user's account permanently
   • DSending an email to the user with instructions
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which of the following is an example of a behavioral indicator rather than a static IoC?

   • AA file hash of a known ransomware binary
   • BAn IP address of a command-and-control server
   • CA process attempting to delete all shadow copies on a system
   • DA domain name used in a phishing campaign
   Reveal Solution Discussion Select an answer first