More Cybersecurity Stuff

Question 1

What does MSSP stand for in terms of Cybersecurity?

Accepted Answer

Managed Security Service Provider

Question 2

Which can help reduce false positives in a Security Information and Event Management (SIEM) system?

Accepted Answer

Fine-tuning detection rules and implementing contextual threat intelligence

Question 3

What type of incident classification is this?

Accepted Answer

False Negative

Question 4

What is SLA?

Accepted Answer

Service Level Agreement

Question 5

What is the primary role of a Computer Security Incident Response Team (CSIRT)?

Accepted Answer

Investigate security alerts and respond to cyber incidents

Question 6

During which phase of incident response are lessons learned and documentation reviewed?

Accepted Answer

Post-Incident Activity

Question 7

What is this scenario an example of?

Accepted Answer

False Positive

Question 8

This is a credential harvesting/phishing attempt.

Accepted Answer

True

Question 9

This is a credential harvesting/phishing attempt.

Accepted Answer

True

Question 10

This is a credential harvesting/phishing attempt.

Accepted Answer

False

Question 11

What type of detection is this?

Accepted Answer

False Positive

Question 12

How should this detection be classified?

Accepted Answer

True Positive

Question 13

What is a Hybrid SOC?

Accepted Answer

It is a mix of both In-house SOC and MSSP outsourced.

Question 14

A security tool fails to detect a real malware infection. What is this an example of?

Accepted Answer

False Negative

Question 15

What is the primary objective of the containment phase in incident response?

Accepted Answer

Prevent further damage and limit impact

Question 16

What is a "false positive" in cybersecurity?

Accepted Answer

A security system incorrectly flagging legitimate activity as malicious

Question 17

Which of the following is an example of an Indicator of Compromise (IOC)?

Accepted Answer

An increase in failed login attempts from a foreign IP

Question 18

Which of the following is an example of a "true positive"?

Accepted Answer

A phishing email is correctly identified and quarantined

Question 19

What type of detection is this?

Accepted Answer

True Positive

Question 20

Which of the following is the correct order of the NIST Incident Response lifecycle?

Accepted Answer

Prepare, Detect & Analyze, Contain, Eradicate & Recover, Post-Incident

Questions 20