GSOM 試験問題を無料オンラインアクセス

In proactive detection, what role does continuous monitoring of network traffic play?
Response:

• A.It is irrelevant if the organization has strong perimeter defenses
• B.Helps in detecting anomalous activities that may indicate a security incident
• C.Is only useful for post-incident analysis, not for detection
• D.Should be avoided as it can lead to privacy violations

Why is it important to integrate endpoint detection and response (EDR) tools into SOC operations?
Response:

• A.To focus solely on external threats and ignore internal anomalies
• B.To provide detailed visibility into endpoint activities and potential threats
• C.To monitor and manage desktop environments only
• D.To replace the need for a SIEM system

Why is it crucial to include all relevant stakeholders in incident response planning?
Response:

• A.To foster a comprehensive approach that covers technical and business aspects
• B.To guarantee that the plan focuses on IT systems exclusively
• C.To ensure that the plan is overly complicated and difficult to execute
• D.To avoid testing the plan to save time and resources

What is the primary goal of the containment phase in incident response?
Response:

• A.To limit the extent of the damage and isolate affected systems
• B.To permanently fix all system vulnerabilities
• C.To restore all systems to operational status
• D.To identify the attacker,s identity and motive

Effective use of post-incident data in SOC operations can lead to:
(Choose two)
Response:

• A.Better stakeholder communication
• B.Improved strategies for future incident prevention
• C.Enhanced understanding of adversary tactics
• D.Decreased reliance on cybersecurity frameworks