A. Correlating threat actor behavior with system logs
B. Analyzing historical data for patterns
C. Creating a roadmap for the investigative process
D. Forming initial conclusions based on gathered data
A. Attack surface analysis
B. Risk mitigation planning
C. Threat assessment
D. Software design review
A. Pattern recognition
B. Behavioral analysis
C. Indicator of compromise
D. Entity profiling
A. Cloud computing
B. Network segmentation
C. Incident response
D. Endpoint monitoring
A. To identify potential threats and vulnerabilities in a system
B. To enhance customer service
C. To assess employee training programs
D. To fix security issues after they have caused damage
A. Identifying false positives
B. Analyzing threat behavior
C. Implementing security controls
D. Logging incident details
A. It helps in identifying their email addresses
B. It helps in understanding their physical location
C. It helps in understanding their favorite color
D. It helps in understanding their objectives and goals
A. Threat intelligence analysis
B. Signature-based detection
C. Behavioral analysis
D. Log correlation
A. Increased network downtime
B. Reduced need for employee training on cybersecurity
C. Improved employee morale
D. Faster response time to threats in the network
A. Strictly focusing on perimeter defense
B. Reactive approach to incident response
C. Analysis of adversary tactics, techniques, and procedures
D. Ignoring data from past cyber incidents
A. Network traffic analysis
B. Threat intelligence analysis
C. Deception technology
D. Signature-based detection
A. Threat hunting is reactive
B. Traditional cybersecurity measures are proactive
C. Threat hunting involves actively searching for threats
D. Threat hunting only focuses on known threats
A. Left-Right Approach
B. Middle-Out Approach
C. Top-Down Approach
D. Bottom-Up Approach
A. Continuous learning is only relevant for junior-level threat hunters.
B. Threat hunting techniques do not change over time.
C. Continuous learning allows threat hunters to keep up with evolving cybersecurity threats and techniques.
D. Continuous learning is not necessary for effective threat hunting.
A. Providing information to build better defenses
B. Identifying all vulnerabilities in the network
C. Predicting future cyber attacks
D. Real-time threat blocking
A. Identifying assets and their value
B. Creating a threat matrix
C. Conducting vulnerability assessments
D. Defining security requirements
