Question 1

What is the goal of a SOC?

Accepted Answer

To detect, analyze, and respond to cybersecurity incidents using a combination of technology solutions and strong  processes.

Answer

To implement and operate security infrastructure and follow IT  processes and procedures.

Answer

To secure the company external cyber security attacks and threats to disrupt business and steal data.

Answer

To provide end-to-end remediation of cybersecurity incidents and prevent occurrence. Including implementation of infrastructure changes.

Question 2

What is the Benefit of having a Security Operations Center? (Best Answer)

Accepted Answer

To provide continuous improvement of incident prevention and detection through monitoring and incident response and analysis.

Answer

To stop cyber security incidents from occurring through continuous operations of security tools.

Answer

To respond to external threats, hacks and breaches and remediate the incident quickly to mitigate disruption and data loss.

Question 3

Why do organizations need Security Operations Centers? (best answer)

Accepted Answer

Security tools alone can not detect and prevent cyber security incidents; people are needed to continuously manage threats; identify emerging risks; and be responsive to incidents.

Answer

Security detection and prevention tools are too complicated to implement and maintain. Need specialist to run the tools.

Answer

IT teams can handle it. A SOC is a luxury.

Answer

Company investors and board of directors are demanding the company have a SOC. It help with insurance costs and customer trust.

Question 4

What is a SIEM?

Accepted Answer

An incident and event management platform

Answer

Security Insight and Event Management platform

Answer

A security event detection and prevention platform

Answer

Network event detection platform

Question 5

What is a Vulnerability Scanner?

Accepted Answer

A tool to identify exploits on systems and identify security holes such as missing patches and misconfigurations.

Answer

A tool to identify high risk external traffic, anomalous traffic and exploits traversing the network.

Answer

A tool to identify internal security threats such as lack of authentication, RBAC, DLP and encryption.

Answer

A tool to look for malware, adware, viruses, and hacking tools kits.

Question 6

What is Advanced Malware Protection software for end-points?  (best answer)

Accepted Answer

It is an malware detection and prevention tool for mobile devices, PCs, and servers.  It uses a combination of techniques to identify malware including file analysis and behavioral heuristics.

Answer

It is an anti-virus and malware scanner for workstations and laptops. It SHA and MD5 file matching.

Answer

It uses file scanning and DNS query scoring to identify risky sites and connections and prevents transfer of files between the protected device and the external connection.

Answer

It is a malicious file and URL blocker for any end user devices including PCs and Mobile devices.

Related quizzes

Related quizzes