A SOC engineer, is evaluating how to use artificial intelligence in order to improve how their organization responds to security threats. Which of the following benefits can the engineer realize from augmenting incident response with artificial intelligence?

• A.AI will require security analysts to spend more time writing detection rules.
• B.AI will automatically respond to and remediate all security events without supervision.
• C.AI can write incident reports that analysts do not need to review before publishing.
• D.AI can reduce the amount of time analysts spend collecting and correlating data from security tools.

Comment: *

Name: *

Email: *

Verification: *

Bocklava, Inc. is looking to launch their Software as a Service in an environment that is accredited against a specific control framework (i.e. PCI, ISO). What is the most effective way to ensure the appropriate controls of this environment are properly funded and implemented?

• A.Create a business case for the environment to meet all required controls.
• B.Hire a red team assessment to identify gaps.
• C.Align the cost of the controls to the revenue generated by the new environment.
• D.Ensure all requirements are entered in the ticketing system.

Comment: *

Name: *

Email: *

Verification: *

Kevin is a security architect at a publicly traded company. Why does the business care about a Security Operations Center (SOC)'s metrics for Mean Time to Detect (MTTD)?

• A.It may impact future investments.
• B.It may impact stock price.
• C.It may impact business continuity.
• D.It may impact regulatory reporting requirements.

Comment: *

Name: *

Email: *

Verification: *

Which of the following explains the benefits of modern cybersecurity defense data architectures using technologies such as data fabric, data lakes, message bus, and federated search?

• A.They use local storage on each security appliance to reduce network traffic and eliminate the need for search capabilities.
• B.They protect and isolate security data ensuring safe data sharing.
• C.They distribute data storage and processing, enabling different teams to manage and consume data as needed to meet their use cases.
• D.They centralize all security data into a single repository to reduce complexity and improve access speed.

Comment: *

Name: *

Email: *

Verification: *

Buttercup games has implemented over 100 detections in their SOC. These detections consist mostly of vendor provided signatures and field matching that have been tuned, with a few that have been custom built. What more advanced detection methods should they deploy?

• A.Define breaches of static thresholds
• B.Enrich with asset and identity information
• C.Use an outlier based algorithm
• D.Use automation to pull additional data

Comment: *

Name: *

Email: *

Verification: *