Question 1

Why is encryption challenging to security monitoring?

Options :

A : Encryption analysis is used by attackers to monitor VPN tunnels.

B : Encryption is used by threat actors as a method of evasion and obfuscation.

C : Encryption introduces additional processing requirements by the CPU.

D : Encryption introduces larger packet sizes to analyze and store.

Answer: B

Question 2

A security engineer notices confidential data being exfiltrated to a domain 'Ranso4134-mware31-895' address that is attributed to a known advanced persistent threat group The engineer discovers that the activity is part of a real attack and not a network misconfiguration. Which category does this event fall under as defined in the Cyber Kill Chain?

Options :

A : reconnaissance

B : delivery

C : action on objectives

D : weaponization

Answer: D

Question 3

What is vulnerability management?

Options :

A : A security practice focused on clarifying and narrowing intrusion points.

B : A security practice of performing actions rather than acknowledging the threats.

C : A process to identify and remediate existing weaknesses.

D : A process to recover from service interruptions and restore business-critical applications

Answer: C

Question 4

How does TOR alter data content during transit?

Options :

A : It spoofs the destination and source information protecting both sides.

B : It encrypts content and destination information over multiple layers.

C : It redirects destination traffic through multiple sources avoiding traceability.

D : It traverses source traffic through multiple destinations before reaching the receiver

Answer: B

Question 5

What is the difference between statistical detection and rule-based detection models?

Options :

A : Rule-based detection involves the collection of data in relation to the behavior of legitimate users over a period of time

B : Statistical detection defines legitimate data of users over a period of time and rule-based detection defines it on an IF/THEN basis

C : Statistical detection involves the evaluation of an object on its intended actions before it executes that behavior

D : Rule-based detection defines legitimate data of users over a period of time and statistical detection defines it on an IF/THEN basis

Answer: B