Cisco CyberOps Associate Module 01 - 02 Quiz

You are concerned that IoT will make your network vulnerable to attacks. What action can you take?

The time required to stop the incident from causing further damage.

How much time can a network be down per year and still have 99.999% uptime?

What does KPI stand for?

Security cannot be so strong that it interferes with employees or business functions.

The length of time threat actors have access before they are detected and stopped.

How this works. Pick the red square

It's estimated that 15% of security organizations with teams larger than 5 people will utilize this by 2020

Pick two examples of personally identifiable information (PII). (Choose two.)

Which technology uses playbooks to integrate threat intelligence, automate incident investigation and workflows?

Which web sites should be avoided when connecting to a free and open wireless hotspot?

Manages all SOC resources and is the point of contact for the larger organization or customer.

The day of a Cybersecurity Analyst typically begins with monitoring security alert queues.

A cell phone acts as a wireless access point allowing connections to the company network. Which type of threat is this?

What is the dark web?

The help desk gets complaints that the wireless network password changes without warning. What might be happening?

PC displays a message that all of the user files are locked and asks for money to retrieve files.

If a ticket cannot be resolved, who does the Cybersecurity Analyst forward the ticket to?

Which is on of the oldest security certification organizations?

What type of cyberwarfare weapon was Stuxnet?

Which U.S. law regulates the identification, storage, and transmission of patient personal healthcare information?

What does SOAR stand for?

Which example illustrates how malware might be concealed?

SIEM is short for?

The Cisco CyberOps Associate course trains you for which position in an SOC?

(ISC)² is an international non-profit organization that offers this certification.

What is the main purpose of cyberwarfare?

Which threat actor uses commonly available hacking tools?

Why would an attacker send malware as an email attachment to employees in a company?

Which certification certification provides a 1^st step in learning the skills needed to work with a SOC team?

Which statement describes cyberwarfare?

SOC personnel who monitor incoming alerts, verify true incidents , and forward tickets to Tier 2.

What is Security Onion?

What does the term sandboxed mean?

What type of malware has the primary objective of spreading across the network?

A Cybersecurity Analyst will never check that an alert represents a true security incident.

Which E.U. law regulates the identification, storage, and transmission of personal information?

SIEM and SOAR are often paired together as they have capabilities that complement each other.

SOC Personnel that hunt for potential threats and implement threat detection tools.

Which job requires expert-level skills in networking, endpoint, threat intelligence, and malware reverse engineering?

What is frequently used to assign alerts to a queue for a Tier 1 Cybersecurity Analyst to investigate?

What type of malware consists of code inserted into a program that must be triggered by user action?

What job would verify that an alert represents a true security incident?

What do SOC personnel use to help fight against security threats?

Which program is used to run mulitple operating systems?

Which certification is offered by CompTIA?

Pick three SOC technologies processed by an SIEM

SOC personnel responsible for deep investigation of incidents and advise action to be taken.

Pick the 3 major categories of elements in a SOC

Which is a network of infected computers controlled as group?

Which cyber attack involves a coordinated attack from a botnet of zombie computers?

Why do IoT devices pose a greater risk than other computing devices on a network?

The average time it takes to stop and remediate a security incident.

The average time it takes for the SOC personnel to detect valid security incidents.

A worker accidentally sends a patient's record to a printer in another department. What type of breach is this?

What does the term "evil twin" refer to?