Question 1

What does the term "MTTR" stand for in the context of incident response?

Options :

A : Minimum Time to React

B : Maximum Time to Recover

C : Most Threatening Timeframe to Respond

D : Mean Time to Remediate

Answer: D

Question 2

What is the primary focus of a Security Engineer in a SOC?

Options :

A : Designing and implementing security solutions

B : Providing technical support

C :

Ensuring regulatory compliance

D : Analyzing security threats and vulnerabilities

Answer: A

Question 3

Which of the following are common cyber industry controls, standards, or frameworks?

Options :

A :

COBIT

B : GDPR

C : ISO/IEC 27001

D : HIPAA

E : NIST Cybersecurity Framework

Answer: A,C,E

Question 4

What is the purpose of adaptive response actions in Splunk Enterprise Security?

Options :

A : To generate threat intelligence reports

B : To automate incident response actions based on predefined conditions

C : To visualize security events in real-time

D :

To analyze network traffic patterns

Answer: B

Question 5

What is a common data source used for threat analysis in a SIEM environment?

Options :

A : Sports scores

B :

Cooking recipes

C : Weather forecasts

D : Security logs

Answer: D