Question 1

What is a dependency for the functionality of signature-based malware detection?

Options :

A : Frequent database updates

B : Support of a DLP device

C : API integration with a sandbox

D : Enabling quality of service

Answer: A

Question 2

A company experiences a ransomware attack that encrypts critical files on multiple endpoints. The security team needs to determine which tool within their Extended Detection and Response (XDR) platform to use for containment, investigation, and recovery. Which of the following XDR capabilities is most appropriate for this scenario?

Options :

A : Threat Intelligence Integration for blocking malicious IP addresses

B : Automated Threat Hunting to proactively search for undetected malware

C : Network Traffic Analysis (NTA) for identifying unusual network patterns

D : Endpoint Detection and Response (EDR) for isolating affected devices

Answer: D

Question 3

How does TLS ensure the confidentiality of the session key during the handshake process?

Options :

A : The session key is shared over an encrypted channel established by the server’s certificate.

B : The client sends the session key encrypted with the server’s private key.

C : The session key is pre-shared before the handshake begins.

D : The session key is derived independently by both parties using shared secrets.

Answer: D

Question 4

A cybersecurity team notices that their signature-based endpoint protection software is failing to keep up with modern threats. They are considering additional measures. Which of the following demonstrates a valid reason why signature-based anti-malware is insufficient on its own?

Options :

A : It struggles to detect fileless malware that resides in memory and doesn’t leave a trace on disk.

B : It cannot integrate with other endpoint security tools to provide layered defenses.

C : It cannot detect malware embedded in web traffic or email attachments.

D : It offers no defense against insider threats or intentional malicious activity.

Answer: A

Question 5

In the context of the AAA framework, which of the following best illustrates the accounting component’s functionality?

Options :

A : Granting users access to specific network segments based on predefined policies.

B : Providing users with access tokens to securely verify their identity on the network.

C : Ensuring that user credentials are encrypted during the authentication process.

D : Keeping a detailed log of a user’s login time, duration of access, and resources utilized during their session.

Answer: D

Free Cybersecurity-Practitioner Mock Exam – Practice Online Confidently

Buying Options: