最新的GIAC GSOM免費考試真題

問題1

After a cybersecurity incident, the use of post-incident data should primarily aim to:
Response:

A. Increase the organization,s insurance premiums

B. Identify the root cause of the incident

C. Avoid communicating the incident to stakeholders

D. Assign blame to team members

正確答案: B

問題2

Effective SOC metrics should:
(Choose two)
Response:

A. Be unrelated to the organization,s specific security objectives

B. Enable benchmarking against industry standards or peers

C. Support strategic decision-making and resource allocation

D. Be static and rarely reviewed for relevance or accuracy

正確答案: B,C

問題3

How can community-sourced resources benefit SOC detection capabilities?
Response:

A. Encouraging a reactive rather than proactive approach to threat detection

B. Offering diverse insights and data that can reveal new or evolving threats

C. By providing a platform for sharing unverified threat information

D. Replacing the need for an internal SOC team

正確答案: B

問題4

An effective incident response plan should:
(Choose two)
Response:

A. Only include roles for IT and security personnel, excluding other departments

B. Be so detailed that it cannot be adapted to specific incidents

C. Be tested and updated regularly based on lessons learned and evolving threats

D. Clearly outline procedures for documentation and evidence preservation

正確答案: C,D

問題5

Which of the following is an essential aspect of the preparation phase in the incident response cycle?
Response:

A. Negotiating with the attackers

B. Conducting a detailed risk assessment

C. Taking legal action against cyber attackers

D. Recovering data from backup systems

正確答案: B

問題6

After a cybersecurity incident, the use of post-incident data should primarily aim to:
Response:

A. Increase the organization,s insurance premiums

B. Identify the root cause of the incident

C. Avoid communicating the incident to stakeholders

D. Assign blame to team members

正確答案: B

問題7

Which of the following is considered an active defense technique?
Response:

A. Ignoring suspicious activity to avoid alerting potential adversaries

B. Outsourcing all security operations with no internal oversight

C. Exclusively relying on antivirus software for threat detection

D. Deploying honeypots to detect and analyze attacks

正確答案: D

問題8

Select the statements that accurately describe the planning of data collection in SOC monitoring:
(Choose two)
Response:

A. It should involve stakeholders from different organizational departments.

B. It should consider both internal and external data sources.

C. It must focus solely on data that can be collected quickly.

D. It requires disregarding the data privacy regulations.

正確答案: A,B

問題9

Which metric is essential for measuring the effectiveness of SOC''s incident response capabilities?
Response:

A. The total annual budget of the SOC

B. The number of coffee cups consumed by the team

C. Mean Time to Detect (MTTD) incidents

D. The number of staff parties held annually

正確答案: C

最新的GIAC Security Operations Manager - GSOM免費考試真題

聯系我們

站內鏈接

最新更新