300-220 exam

During which phase of the threat hunting process are threat indicators analyzed and correlated?A . CollectionB . AnalysisC . InvestigationD . RemediationView AnswerAnswer: B

What does the term "honeypot" refer to in threat hunting techniques?A . A sweet treat for security analystsB . A decoy system designed to lure attackersC . A type of encryption algorithmD . A tool used for network mappingView AnswerAnswer: B

What is the purpose of the data processing phase in the threat hunting process?A . To prioritize threats based on severityB . To enrich collected data with threat intelligenceC . To filter and normalize data for analysisD . To block malicious traffic at the perimeterView AnswerAnswer: C

What is the purpose of proactively conducting threat hunting in a cybersecurity environment?A . To detect and neutralize threats that have bypassed traditional security measures.B . To respond to security incidents after they have already occurred.C . To install new antivirus software on all devices.D . To generate automated cybersecurity...

How can threat hunting benefit from leveraging threat intelligence feeds?A . By reducing the need for regular monitoringB . By providing up-to-date information on emerging threatsC . By automating the threat hunting process entirelyD . By limiting the scope of investigations to known indicatorsView AnswerAnswer: B

What is the primary goal of threat modeling in cybersecurity?A . Identifying vulnerabilitiesB . Conducting penetration testingC . Developing incident response plansD . Prioritizing security controlsView AnswerAnswer: A

Which of the following is NOT a common threat modeling technique?A . Attack treesB . DREAD modelC . Kill chain analysisD . SWOT analysisView AnswerAnswer: D

What is the difference between threat hunting and traditional security measures like firewalls and antivirus software?A . Threat hunting focuses on identifying threats that have evaded traditional security measuresB . Traditional security measures are more expensive than threat huntingC . Threat hunting uses artificial intelligence while traditional security measures do...

What is the primary goal of using the STRIDE model in threat modeling?A . Identify potential attacker motivations and goalsB . Assess the impact of security vulnerabilitiesC . Identify potential threats and their characteristicsD . Ensure the security of sensitive dataView AnswerAnswer: C

What is the main goal of using infrastructure analysis in threat actor attribution?A . To identify the physical infrastructure used by the attackerB . To track the command and control serverC . To analyze the structure and organization of the attacker's operationsD . To gather intelligence from open-source dataView AnswerAnswer:...