FCSS_SOC_AN-7.4 試験問題を無料オンラインアクセス

Which two statements about the FortiAnalyzer Fabric topology are true? (Choose two.)

• A.Downstream collectors can forward logs to Fabric members.
• B.The supervisor uses an API to store logs, incidents, and events locally.
• C.Logging devices must be registered to the supervisor.
• D.Fabric members must be in analyzer mode.

Which statement best describes the MITRE ATT&CK framework?

• A.It describes attack vectors targeting network devices and servers, but not user endpoints.
• B.It contains some techniques or subtechniques that fall under more than one tactic.
• C.It covers tactics, techniques, and procedures, but does not provide information about mitigations.
• D.It provides a high-level description of common adversary activities, but lacks technical details

Which MITRE ATT&CK technique category involves collecting information about the environment and systems?

• A.Exfiltration
• B.Discovery
• C.Credential Access
• D.Lateral Movement

Which role does a threat hunter play within a SOC?

• A.investigate and respond to a reported security incident
• B.Monitor network logs to identify anomalous behavior
• C.Search for hidden threats inside a network which may have eluded detection
• D.Collect evidence and determine the impact of a suspected attack

When does FortiAnalyzer generate an event?

• A.When a log matches a filter in a data selector
• B.When a log matches a task in a playbook
• C.When a log matches an action in a connector
• D.When a log matches a rule in an event handler