CompTIA CySA+ - Day 2 Review

Which device inspects inbound and outbound traffic for suspicious patterns and alert you if discovered?

Which of the IDS Alerts does not raise an alarm when a legitimate attack has taken place?

Which of the following is NOT an advantage of HIDS systems?

Which of the following is NOT a typically activity for an IDS?

Which of these systems is uniquely positioned to detect computer abuse from insiders?

Which analysis framework provides the most explicit detail regarding the tactics and techniques of a threat actor?

Which type of threat will a patch NOT effectively work as a corrective control?

Which of these linux commands would allow you to review the last 10 entries inside of the access.log file?

Which of these roles in cybersecurity maintains overall responsibility for information security within an organization?

_____ looks at patterns of human behavior, and then apply algorithms and statistical analysis to detect threats on hosts

Which threat group is considered to be sophisticated and uses techniques that are more stealthy to avoid detection?

You are planning the placement of the sensors for the IDS. Where should they NOT be placed?

__________ is a means to proactively search for malware or attackers that are lurking in your network.

Which of these tool is NOT a SIEM used for CSM on systems within networks today?

Which of these would look for the regular expression of 3 decimal integers?

An IDS is overwhelming the team with alerts that are legitimate attacks! What are these called?

Which of the following is NOT an IDS?

You want to detect crypto-malware on a device that an employee in HR is using. Which of these should you use?

Which of these email security techniques allows you to identify the hosts authorized to send email from that domain?

What is the utilization of insights gained from threat research and threat modeling to discover adversarial TTPs called?