Cisco 300-220 問題練習

Question No : 1
Artifacts at which level of the Pyramid of Pain provide the most context about an attack but are also the most challenging to use for attribution?

• A.IP addresses
• B.Domain names
• C.File hashes
• D.TTPs

答えを確認する

正解:

Question No : 2
What indicates a successful C2 communication detection using endpoint logs? (Choose two)

• A.Increased outbound traffic to unknown IPs
• B.Frequent system reboots
• C.Unusual process tree formations
• D.High volume of encrypted data sent to known ports

答えを確認する

正解:

Question No : 3
In cloud-native threat hunting, which AWS service's logs are essential for analysis?

• A.Amazon EC2
• B.AWS CloudTrail
• C.Amazon Simple Storage Service (S3)
• D.AWS Lambda

答えを確認する

正解:

Question No : 4
A tactic that indicates a sophisticated threat actor rather than a commodity malware campaign is:

• A.Use of widely available exploit kits
• B.Targeted spear-phishing emails
• C.Scanning the internet for vulnerable servers
• D.Posting threats on social media

答えを確認する

正解:

Question No : 5
To identify unknown gaps in detection, one should:

• A.Only trust verified threats
• B.Conduct regular security assessments
• C.Assume all configurations are secure
• D.Rely solely on automated alerts

答えを確認する

正解:

Question No : 6
Identifying analytical gaps using threat hunting methodologies helps in:

• A.Reducing the efficiency of the threat hunting team
• B.Increasing the time to detect threats
• C.Pinpointing areas for process improvement
• D.Decreasing data visibility

答えを確認する

正解:

Question No : 7
When interpreting data from memory-specific tools, what is crucial to identify?

• A.The brand of the memory modules
• B.Anomalies and patterns indicative of exploitation
• C.The total RAM capacity
• D.The serial numbers of the memory sticks

答えを確認する

正解:

Question No : 8
Selecting deception techniques for a scenario involves:

• A.Placing honeypots within the network
• B.Creating fake social media accounts for the IT staff
• C.Using misleading comments in the code
• D.Sending false positive alerts to attackers

答えを確認する

正解:

Question No : 9
Selecting the appropriate threat modeling approach for a scenario requires understanding the:

• A.Financial budget of the organization
• B.Specific security requirements and context
• C.Number of employees in the organization
• D.Brand of hardware used in the IT infrastructure

答えを確認する

正解:

Question No : 10
A delivery method that is commonly used by threat actors but rarely in authorized assessments is:

• A.Phishing emails with malicious attachments
• B.Use of known vulnerabilities
• C.Social engineering via phone calls
• D.Exploitation of zero-day vulnerabilities

答えを確認する

正解:

Question No : 11
Endpoint artifacts are crucial for uncovering undetected threats.
Which of the following are considered endpoint artifacts? (Choose two)

• A.Router configuration files
• B.Windows Registry keys
• C.Bash history in Linux
• D.DNS server logs

答えを確認する

正解:

Question No : 12
A mitigation strategy for blocking C2 traffic that involves analyzing behavioral patterns is known as:

• A.Whitelisting all inbound connections
• B.Deploying anomaly-based detection
• C.Disabling network monitoring tools
• D.Increasing network bandwidth

答えを確認する

正解:

Question No : 13
Structured threat hunting differs from unstructured threat hunting in that it:

• A.Is more ad hoc and relies on the hunter's intuition
• B.Requires predefined datasets for analysis
• C.Is based on specific hypotheses or indicators
• D.Does not require any prior knowledge of threats

答えを確認する

正解:

Question No : 14
Effective tools and configurations for detection should:

• A.Only include open-source solutions
• B.Be regularly updated and patched
• C.Be chosen based on the security team's familiarity
• D.Always be the most expensive option for effectiveness

答えを確認する

正解:

Question No : 15
Attack remediation strategies should be based on:

• A.The latest tech trends
• B.The results of a threat assessment
• C.The personal preferences of the security team
• D.The most expensive solution available

答えを確認する

正解: