GSOC 試験問題を無料オンラインアクセス

Which methods are commonly utilized by SOCs for effective monitoring?
(Choose Two)
Response:

• A.Utilization of Security Information and Event Management (SIEM) systems
• B.Network traffic analysis
• C.Sole reliance on antivirus software
• D.Manual log reviews at random intervals

Which of the following are key benefits of continuous monitoring by the Blue Team?
(Choose Two)
Response:

• A.Replacing the need for periodic security audits
• B.Identifying and mitigating threats in real time
• C.Reducing the attack surface by addressing vulnerabilities promptly
• D.Disabling all network traffic during business hours

When designing and sharing analytics insights with stakeholders, which strategies should be employed to enhance communication effectiveness?
(Choose Two)
Response:

• A.Presenting raw data without interpretation
• B.Tailoring communication style based on the audience's expertise
• C.Delivering data insights using interactive visualizations
• D.Using highly technical language for all reports

In the process of analytics enrichment, which of the following is a recommended best practice?
Response:

• A.Enriching data using random intervals
• B.Relying solely on internal data sources
• C.Ignoring data reliability to focus on speed
• D.Incorporating external data sources to enhance analysis

Which of the following is an indicator of a DNS-based attack?
Response:

• A.Repeated failed login attempts
• B.Frequent HTTP 404 errors
• C.Unusually high traffic to a single DNS server
• D.High CPU usage on endpoint devices