Question 1

Which of the following best describes how a Security Information and Event Management (SIEM) system improves security operations?

Options :

A : SIEM tools detect malware and automatically remove infected files from endpoints.

B : SIEM tools provide log aggregation, correlation, and alerting to identify threats in real time.

C : SIEM tools replace the need for manual threat hunting by automating all security tasks.

D : SIEM tools passively collect logs without analyzing them, ensuring compliance.

Answer: B

Question 2

An organization is configuring an IPsec VPN to connect two branch offices. During the setup, they must choose a tunneling protocol for negotiating encryption keys. Which phase of IKE and protocol combination is best suited for this task?

Options :

A : IKE Phase 2 using aggressive mode to negotiate encryption keys.

B : IKE Phase 1 using quick mode to manage key exchanges.

C : IKE Phase 2 using quick mode to negotiate encryption parameters for the data tunnel.

D : IKE Phase 1 using main mode to establish a secure channel.

Answer: C

Question 3

During the cyberattack lifecycle, which stage involves crafting a malicious payload designed to exploit a target's vulnerabilities and prepare it for deployment?

Options :

A : Delivery

B : Reconnaissance

C : Exploitation

D : Weaponization

Answer: D

Question 4

When deploying threat detection systems in a corporate network, which of the following capabilities are most commonly associated with identifying and mitigating threats? (Choose two)

Options :

A : Packet forwarding

B : Behavioral anomaly detection

C : Network Address Translation (NAT)

D : Static IP allocation

E : Signature-based detection

Answer: B,E

Question 5

Which of the following best represents the role of "Cloud" in the Four Cs of Cloud Native Security?

Options :

A : Offering built-in security features to protect sensitive data within application code.

B : Automating application deployment through continuous integration and continuous delivery (CI/CD) pipelines.

C : Providing the underlying infrastructure, such as compute, storage, and networking, on which applications are built.

D : Ensuring that cloud service providers implement encryption for all stored data.

Answer: C

Free Cybersecurity-Apprentice Mock Exam – Practice Online Confidently

Buying Options: