6.1 Identify and Describe Key Characteristics of Threat Hunting CYBERSECURITY-PRACTITIONER Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   How does threat intelligence integration enhance threat hunting?

   • AIt guarantees that all threats will be detected.
   • BIt provides indicators of compromise and attacker tactics that can guide hypotheses.
   • CIt automatically remediates any detected threats.
   • DIt eliminates the need for human analysis.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A security director wants to shift the team's focus from reacting to alerts to proactively searching for threats. They want to adopt a mindset that the environment may already be compromised. Which initiative best supports this shift?

   • AConducting regular penetration tests to find vulnerabilities.
   • BEstablishing a threat hunting team that develops and tests hypotheses.
   • CIncreasing the number of security alerts monitored by the SOC.
   • DPurchasing more advanced firewalls to block attacks.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the first step in the typical threat hunting process?

   • ADeploying new security tools to detect the threat.
   • BDocumenting the findings of the hunt.
   • CCollecting all available data from every source.
   • DForming a hypothesis about a potential threat.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the key difference between threat hunting and automated detection?

   • AThreat hunting is human-led and hypothesis-driven, while automated detection relies on predefined rules and signatures.
   • BThreat hunting is performed by machines, while automated detection is performed by humans.
   • CThreat hunting is faster than automated detection.
   • DThreat hunting is a subset of automated detection.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which statement correctly contrasts threat hunting with vulnerability management?

   • AThreat hunting searches for active threats, while vulnerability management identifies and remediates known weaknesses.
   • BThreat hunting relies solely on automated scanning, while vulnerability management requires manual analysis.
   • CThreat hunting is performed by the IT department, while vulnerability management is performed by the security team.
   • DThreat hunting is a reactive process, while vulnerability management is proactive.
   Reveal Solution Discussion Select an answer first