Question 1

An employee receives an urgent email claiming that their email account will be disabled unless they log in immediately through a provided link. The email includes a realistic-looking company logo and signature but uses a slightly misspelled domain name. Which phishing techniques are demonstrated in this scenario? (Choose two)

Options :

A : Whaling

B : Domain spoofing

C : Clone phishing

D : Email spoofing

E : Spear phishing

Answer: B,D

Question 2

Your organization uses a Cloud Native Security Platform (CNSP) to ensure compliance with regulatory standards. Which capability is most critical for automating compliance in a multi-cloud environment?

Options :

A : Real-time compliance reporting integrated with cloud-native tools like AWS Config and Azure Policy

B : Manual tagging of compliant and non-compliant resources

C : Focusing on securing only production workloads while ignoring development environments

D : Setting up individual compliance scripts for each cloud environment

Answer: A

Question 3

A company experiences a ransomware attack that encrypts critical files on multiple endpoints. The security team needs to determine which tool within their Extended Detection and Response (XDR) platform to use for containment, investigation, and recovery. Which of the following XDR capabilities is most appropriate for this scenario?

Options :

A : Threat Intelligence Integration for blocking malicious IP addresses

B : Automated Threat Hunting to proactively search for undetected malware

C : Network Traffic Analysis (NTA) for identifying unusual network patterns

D : Endpoint Detection and Response (EDR) for isolating affected devices

Answer: D

Question 4

Which statement describes a host-based intrusion prevention system (HIPS)?

Options :

A : It analyzes network traffic to detect unusual traffic flows and new malware.

B : It scans a Wi-Fi network for unauthorized access and removes unauthorized devices.

C : It is placed as a sensor to monitor all network traffic and scan for threats.

D : It is installed on an endpoint and inspects the device.

Answer: D

Question 5

A financial services company experiences frequent phishing attacks targeting its employees. The security team struggles with slow response times due to manual processes for alert triage and remediation. How can implementing a SOAR platform address these challenges? (Choose two)

Options :

A : Prevents phishing emails from reaching employees by scanning all incoming emails in real time.

B : Coordinates and integrates with email security tools to streamline phishing incident response.

C : Automatically analyzes and prioritizes phishing alerts based on predefined risk criteria.

D : Guarantees complete eradication of all phishing threats from the organization.

E : Automates the process of isolating affected accounts and notifying impacted employees.

Answer: B,C

Confidently Practice Online with Free Cybersecurity-Practitioner Exam Cram

Buying Options: