Question 1

What does the MITRE ATT&CK Matrix consist of?

Options :

A : Problems and Solutions

B : Attackers and Techniques

C : Tactics and Techniques

D : Entities and Tactics

Answer: C

Question 2

Which Endpoint Setting should an administrator utilize to locate unmanaged endpoints on a network subnet?

Options :

A : Device Discovery

B : Endpoint Enrollment

C : Discover and Deploy

D : Discover Endpoints

Answer: C

Question 3

Which security control is complementary to IPS, providing a second layer of protection against network attacks?

Options :

A : Host Integrity

B : Network Protection

C : Antimalware

D : Firewall

Answer: D

Question 4

Which type of event does operation:1indicate in a SEDR database search?

Options :

A : File Deleted.

B : File Closed.

C : File Open.

D : File Created.

Answer: C

Question 5

What EDR function minimizes the risk of an endpoint infecting other resources in the environment?

Options :

A : Quarantine

B : Block

C : Deny List

D : Firewall

Answer: A

Free 250-580 Mock Exam – Practice Online Confidently