GIAC Security Operations Manager GSOM Prüfungsfragen mit Lösungen:
1. What role do analytics play in SOC operations?
Response:
A) They are solely used for annual reporting purposes.
B) They reduce the need for human analysts.
C) They are only relevant for external reporting.
D) They help identify patterns and anomalies in data to improve threat detection.
2. In the context of SOC operations, continuous improvement through adversarial emulation aims to:
Response:
A) Focus solely on external threats, ignoring internal vulnerabilities
B) Validate and improve upon existing security measures
C) Increase the complexity of the cybersecurity environment
D) Ensure a constant state of compliance with less effort
3. Which metric can help in assessing the SOC''s efficiency in identifying false positives?
Response:
A) The number of high-priority incidents only
B) The annual budget allocated to the SOC
C) The total number of alerts in a year
D) The ratio of false positives to true positives
4. The incident response cycle typically begins with which of the following phases?
Response:
A) Recovery
B) Identification
C) Eradication
D) Preparation
5. Effective SOC planning should take into account:
(Choose two)
Response:
A) The preference for automated systems over human decision-making
B) The organization,s specific threat landscape and relevant attack scenarios
C) The latest trends in cybersecurity technology regardless of their relevance to the business
D) The regulatory compliance requirements affecting the organization
Fragen und Antworten:
| 1. Frage Antwort: D | 2. Frage Antwort: B | 3. Frage Antwort: D | 4. Frage Antwort: B | 5. Frage Antwort: B,D |
1279 Kundenbewertungen
