Mod 3

What are the Three Cyber Interrelated Layers?

Which of the following are examples of passive reconnaissance?

Which description is most accurate to what an IRP is?

Whatis the protocols we most commonly use?

Which of the following is an example of a security incident?

What is an event? (choose the best answer)

Zeek displays what?

Which of the following is NOT part of the Threat Actor Infrastructure?

What is a unique ID field only associated with Zeek in Kibana

Skibidi

The core document of the DEL 6 Incident Response Lifecycle is the NIST SP 800-61.

Analysis Space consists of Time, Terrain, and Behavior

What are examples of Attack Surfaces?

Suricata displays what?

Which is NOT a step of the NIST Incident Response lifecycle?

What displays panels?

Which of the following is NOT true about TAPs?

HTTPS traffic is usually captured in http.log

What do we use for signature-based detection?

Which of the following is NOT an IDS evasion tactic?

A cybersecurity "event" is a confirmed security event that has caused harrm or disruption to a system.

What is the primary purpose of the suricata.yaml file in Suricata?

Which Threat Detection Methodology is used to go after known threats?

the conn.log doesn't answer which of the following

Which TIER is USCYBERCOM associated with?

Which of the Threat Detection Models lets you discover zero day vulnerabilities?

What is a Suricata Rule Header?

What ID field can you use to connect zeek logs to suricata alerts

Two types of TTP Frameworks are?

different zeek logs from the same connection will have a diferent zeek.session_id

Which content catagory is NOT included in the Delta 6 SOC IRP?

Which of these is not a Manticore Utility?

What DoD branch has the best Quality of Life?

Which part of manticore would you track incidents and events in?

Which of the following is true about a Switched Port Analyzer (SPAN)?

Which of the following is NOT listed a source for Emerging TTPs?

What document dictates the minimum threshold for reporting requirements?

TTP Based Detection & Threat Hunting Steps are: Characterization, Data Collection, _______, and Outputs