Analyze the output in the screenshot below.

What is the first step that should be taken to harden this host?

• A.Verify if running services are necessary.
• B.Implement two-factor authentication for telnet.
• C.Turn off host based file integrity checking.
• D.Turn on modsecurity for the http service.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would most directly help reduce false positives in a brute-force login detection?

• A.Lowering the detection threshold
• B.Adding context such as known VPN/proxy IP allowlists and account lockout status
• C.Removing the detection from production
• D.Increasing the search schedule frequency

Comment: *

Name: *

Email: *

Verification: *

Which of the following are standard features of a Threat Intelligence Platform (TIP)? (Choose all that apply.)

• A.Automated report correlation
• B.Stores forensic images
• C.Capability of high-volume indicator storage
• D.Built-in sharing functionality

Comment: *

Name: *

Email: *

Verification: *

Buttercup Games needs to provide its SOC team access to a wide range of security data sources located across different regions and cloud providers. Which architectural solution allows the SOC analysts to query these data sources as a single logical source without having to migrate or copy all the raw data?

• A.Data mesh
• B.Message bus
• C.Centralized data warehouse
• D.Federated search

Comment: *

Name: *

Email: *

Verification: *

Emma is a security architect helping migrate her organization's on-premises SIEM to a newer version of the same SIEM running in a cloud provider. The newer version includes enhanced capabilities for writing detection content. The detection engineering team has built hundreds of rules in the on-premises SIEM over the years. As Emma starts planning for the migration, what should she do about moving the detection rules to the new platform?

• A.Export half of the rules from the SIEM and manually convert them.
• B.Nothing, the newer version's default detection content will cover the organization's needs.
• C.Export all of the rules from the SIEM in Sigma format and import them into the new platform.
• D.Review which rules are still relevant to the organization's threat models to prioritize for migration.

Comment: *

Name: *

Email: *

Verification: *