Which threat uses trusted system tools to avoid detection?
A.
Ransomware
B.
File less malware
C.
Boot sector virus
D.
Macro virus
Correct Answer: B
Explanation:
File less malware leverages legitimate system tools and memory execution, making it harder to detect using traditional antivirus solutions.
Question #2 (Topic: demo questions)
Which phase of the attack lifecycle involves gaining initial access?
A.
Command and control
B.
Reconnaissance
C.
Delivery and exploitation
D.
Exfiltration
Correct Answer: C
Explanation:
Delivery and exploitation is the phase where attackers deliver payloads and exploit vulnerabilities to gain
access to systems.
Question #3 (Topic: demo questions)
The MITRE ATT&CK framework is best described as:
A.
A vulnerability scoring system
B.
A compliance auditing framework
C.
A knowledge base of adversary tactics and techniques
D.
A penetration testing tool
Correct Answer: C
Explanation:
MITRE ATT&CK documents real-world adversary behaviors and maps tactics and techniques used
during cyber attacks. It helps SOC teams improve detection and response.
Question #4 (Topic: demo questions)
A Tier 1 SOC analyst is mainly responsible for:
A.
Threat hunting and malware reverse engineering
B.
Initial alert triage and escalation
C.
Developing security policies
D.
Performing forensic investigations
Correct Answer: B
Explanation:
Tier 1 analysts handle initial alert review, validation, and escalation to higher tiers if required. They focus
on monitoring dashboards and identifying false positives.
Question #5 (Topic: demo questions)
A Security Operations Center (SOC) primarily exists to:
A.
Develop new software applications
B.
Monitor, detect, and respond to security threats
C.
Manage corporate finance systems
D.
Perform marketing analytics
Correct Answer: B
Explanation:
A SOC focuses on continuous monitoring, threat detection, and incident response to protect
organizational assets. It acts as the central hub for security operations and response activities.