Question 1

What does the term "Mean Time to Respond (MTTR)" signify in the context of security operations?

Options :

A : The average time taken to detect a threat after it enters the network

B : The average time taken by the security team to respond to and mitigate a security incident

C : The average time between identifying a threat and reporting it to stakeholders

D : The average time taken to patch a known vulnerability in the system

Answer: B

Question 2

When deploying threat detection systems in a corporate network, which of the following capabilities are most commonly associated with identifying and mitigating threats? (Choose two)

Options :

A : Packet forwarding

B : Behavioral anomaly detection

C : Network Address Translation (NAT)

D : Static IP allocation

E : Signature-based detection

Answer: B,E

Question 3

In the context of the cloud shared responsibility model, which of the following scenarios best illustrates a misunderstanding of security responsibilities when using Infrastructure as a Service (IaaS)?

Options :

A : The customer encrypts sensitive data stored on the cloud.

B : The CSP implements multi-factor authentication (MFA) for access to its management console.

C : The customer assumes the CSP is responsible for securing access to their virtual machines.

D : The CSP maintains physical security and prevents unauthorized access to data centers.

Answer: C

Question 4

Which of the following best describes a Wide Area Network (WAN)?

Options :

A : A network limited to a specific metropolitan area, providing high-speed connections.

B : A network that connects devices wirelessly within a limited range, such as a home or office.

C : A network designed to connect devices within a single building or campus.

D : A network that spans large geographical areas, often connecting multiple local area networks (LANs).

Answer: D

Question 5

An organization implements a new cloud-based collaboration platform. The SOC team notices a lack of visibility into activities on the platform, increasing the risk of data breaches. What should the SOC team prioritize to improve visibility in this context?

Options :

A : Use native security features of the collaboration platform, such as logging and monitoring APIs.

B : Increase the number of access controls to limit platform usage.

C : Rely on employee reports to detect suspicious activity on the platform.

D : Monitor only administrative accounts to save on resource usage.

Answer: A

Smartly Prepare Exam with Free Online Cybersecurity-Apprentice Practice Test

Buying Options: