Exam (elaborations)
CTI 2 (1) Questions & 100% Verified Correct Answers with complete solutions (Latest update
CTI 2 (1) Questions & 100% Verified Correct Answers with complete solutions (Latest update
[Show more]
Seller
Follow
Content preview
CTI 2Router
Firewall
Switch
IPS/IDS
Servers
DMZ
VPN - ANS-Which of the following are sources of internal intelligence?
Low lead time (timeliness)
relevance to critical assets
allows for investigation into past attacks on the organization
Massive Amount of information - ANS-Which of the following are advantages of internal
intelligence?
Log centralization
Log normalization
IT compliance reporting - ANS-Which of the following are NOT features of traditional log
management systems?
Log collection
Log aggregation
Long-term retention
Log analysis
Log search and reporting - ANS-Which of the following ARE features of traditional log
management systems?
Security Event Management (SEM) - ANS-The segment of security management that deals with
real time monitoring, correlation of events, notifications and console views is commonly known
as
Security Information Management (SIM) - ANS-The segment of security management that
provides long term storage, analysis and reporting of log data is commonly known as
adding context - ANS-In comparison with traditional log management systems, the most
important feature of SIEM is
User information
asset information
vulnerability scans - ANS-Which of the following are examples of contextual data
, Operating Systems
Applications
Devices
Databases - ANS-Which of the following are examples of event data
HP
IBM
Splunk - ANS-Which of the following are major SIEM providers?
Healthcare
online retail
financial services
social media and online communities - ANS-Which of the following industry sectors are affected
by General Data Protection Regulation (GDPR)?
EPS - ANS-The metric that measures the rate at which the IT infrastructure generates logs is
abbreviated as
Reconnaissance
Weaponization
Delivery
Exploit
Installation
Command and Control
Actions - ANS-What is the correct order of the Lockheed Martin Cyber Kill Chain? (a = step 1, b
= step 2, c = step 3...)
Detect
Deny
Disrupt
Degrade
Deceive
Destroy - ANS-What are the common courses of action in response to malicious activities?
Attack graphs identify and enumerate paths an adversary could take - ANS-Which of the
following better describes attack graphs?
True - ANS-Detecting reconnaissance as it happens can be very difficult, but when defenders
discover recon - even well after the fact - it can reveal the intent of the adversaries.
Delivery - ANS-What is the first and most important opportunity for defenders to block the
operation?
User awareness training and email testing for employees
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller topgradesdr. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for CA$11.13. You're not tied to anything after your purchase.
Can Stuvia be trusted?
4.6 stars on Google & Trustpilot (+1000 reviews)
76462 documents were sold in the last 30 days
Founded in 2010, the go-to place to buy study notes for 14 years now