Lateral movement attacks in cybersecurity refer to

Movedeeper into a n\w after gaining access,typically to reach sensitiv data

What is Phishing attacks

Where attackers send deceptive emails pretending to be from legitimate or

What is Denial-of-Service (DoS) attacks

Disrupt the normal functioning of a targeted comp or n\w, making it unavail

What is Polymorphic Malware

That can change its code to evade detection

studbud

EDR

20 termsStudBud Administration17 plays

Imported from external platform

Flashcards20 cardsFPractice quizPHost liveL

Questions 20

Answers

1
The EDR can be integrated with___ tools
All of the above
SOC
XDR
SIEM
2
What is Microsoft Defender ASR feature ?
Attack Security Remediation
Attack Surface Reduction
Auto Security and Recovery
Attack Security and Recovery
3
Automated remediation and rollback feature available in
EDR & XDR
XDR
EDR
None
4
Does EDR have application control capability ?
No
Yes
Both 1 and 3
Only after Integrating with XDR
5
Lateral movement attacks in cybersecurity refer to
Movedeeper into a n\w after gaining access,typically to reach sensitiv data
Designed to disrupt online services by overwhelming them with traffic
That restricts access to a computer system or the data it contains
A self-replicating malware program that spreads across networks and devices
6
Real-time threat detection in Antivirus is called as
Scheduled Scan
Quick Scan
Full Scan
On-Access Scan
7
The key difference in Traditional AV and NGAV is
All 3
Integration with Microsoft SmartScreen and AMSI
Continuously trained on global threat data
Supports adaptive learning over time
8
Which tool has the capability of Cross-layered detection and response
Traditional Antivirus
XDR
NGAV
EDR
9
What is Phishing attacks
All 3
Malicious s/w that gains unauthorized, persistent access to a comp. system
Where attackers send deceptive emails pretending to be from legitimate or
Attacker secretly intercepts & potentialy alters communi. b/w 2 parties
10
What is Denial-of-Service (DoS) attacks
self-replicating malware program that spreads across networks
Disrupt the normal functioning of a targeted comp or n\w, making it unavail
All 3
From authorized users like employees, contractors, or partners
11
Does EDR Provides cloud intelligence feature ?
Yes
Might Be
No
Optional
12
____ Tool has Visibility across the network
All 3
NGAV
EDR
XDR
13
Malicious software that doesn't rely on traditional files stored on a computer's hard drive to infect a system
Ransomware
Rootkit malware
Sophisticated Malware
Fileless malware
14
Traditional Antivirus software were detecting Malwares based on ____
DAT File Content
Content Files
Security Intelligence files
All 3
15
Advanced hunting Query feature available in
EDR & XDR
XDR
None
EDR
16
EDR has the capability of
Both 1 and 2
Detects anomalies and suspicious patterns
Monitors process and file behavior in real time
None
17
What is EDR
Extended Detection Response
Endpoint Detection Remediation
Endpoint Detection Response
Extended Detection Remediation
18
Automated Investigation & Response is inbuilt feature of
XDR
None
EDR
XDR and EDR
19
What is Polymorphic Malware
Is designed with complex techniques
that can change its Hash file to evade detection
That can change its file to evade detection
That can change its code to evade detection
20
Does EDR is compatible with Linux OS ?
No
Mightbe
It Depends on EDR Version
Yes

EDR Flashcards | StudBud

EDR

20 termsStudBud Administration17 plays

Imported from external platform

Flashcards20 cardsFPractice quizPHost liveL

Questions 20

Answers

1
The EDR can be integrated with___ tools
All of the above
SOC
XDR
SIEM
2
What is Microsoft Defender ASR feature ?
Attack Security Remediation
Attack Surface Reduction
Auto Security and Recovery
Attack Security and Recovery
3
Automated remediation and rollback feature available in
EDR & XDR
XDR
EDR
None
4
Does EDR have application control capability ?
No
Yes
Both 1 and 3
Only after Integrating with XDR
5
Lateral movement attacks in cybersecurity refer to
Movedeeper into a n\w after gaining access,typically to reach sensitiv data
Designed to disrupt online services by overwhelming them with traffic
That restricts access to a computer system or the data it contains
A self-replicating malware program that spreads across networks and devices
6
Real-time threat detection in Antivirus is called as
Scheduled Scan
Quick Scan
Full Scan
On-Access Scan
7
The key difference in Traditional AV and NGAV is
All 3
Integration with Microsoft SmartScreen and AMSI
Continuously trained on global threat data
Supports adaptive learning over time
8
Which tool has the capability of Cross-layered detection and response
Traditional Antivirus
XDR
NGAV
EDR
9
What is Phishing attacks
All 3
Malicious s/w that gains unauthorized, persistent access to a comp. system
Where attackers send deceptive emails pretending to be from legitimate or
Attacker secretly intercepts & potentialy alters communi. b/w 2 parties
10
What is Denial-of-Service (DoS) attacks
self-replicating malware program that spreads across networks
Disrupt the normal functioning of a targeted comp or n\w, making it unavail
All 3
From authorized users like employees, contractors, or partners
11
Does EDR Provides cloud intelligence feature ?
Yes
Might Be
No
Optional
12
____ Tool has Visibility across the network
All 3
NGAV
EDR
XDR
13
Malicious software that doesn't rely on traditional files stored on a computer's hard drive to infect a system
Ransomware
Rootkit malware
Sophisticated Malware
Fileless malware
14
Traditional Antivirus software were detecting Malwares based on ____
DAT File Content
Content Files
Security Intelligence files
All 3
15
Advanced hunting Query feature available in
EDR & XDR
XDR
None
EDR
16
EDR has the capability of
Both 1 and 2
Detects anomalies and suspicious patterns
Monitors process and file behavior in real time
None
17
What is EDR
Extended Detection Response
Endpoint Detection Remediation
Endpoint Detection Response
Extended Detection Remediation
18
Automated Investigation & Response is inbuilt feature of
XDR
None
EDR
XDR and EDR
19
What is Polymorphic Malware
Is designed with complex techniques
that can change its Hash file to evade detection
That can change its file to evade detection
That can change its code to evade detection
20
Does EDR is compatible with Linux OS ?
No
Mightbe
It Depends on EDR Version
Yes