Question 1

What does the MITRE ATT&CK Matrix consist of?

Options :

A : Problems and Solutions

B : Attackers and Techniques

C : Tactics and Techniques

D : Entities and Tactics

Answer: C

Question 2

Which EDR feature is used to search for real-time indicators of compromise?

Options :

A : Domain search

B : Endpoint search

C : Cloud Database search

D : Device Group search

Answer: B

Question 3

Which security control is complementary to IPS, providing a second layer of protection against network attacks?

Options :

A : Host Integrity

B : Network Protection

C : Antimalware

D : Firewall

Answer: D

Question 4

What information is required to calculate retention rate?

Options :

A :

Number of endpoints, EAR data per endpoint per day, available disk space, number of endpoint dumps, dump size

B : Number of endpoints, available bandwidth, available disk space, number of endpoint dumps, dump size

C :

Number of endpoints, available bandwidth, number of days to retain, number of endpoint dumps, dump size

D :

Number of endpoints, EAR data per endpoint per day, number of days to retain, number of endpoint dumps, dump size

Answer: D

Question 5

What is the timeout for the file deletion command in SEDR?

Options :

A : 2 Days

B : 7 Days

C : 72 Hours

D : 5 Days

Answer: C