Week 2 Q's Flashcards
What is a Security Operations Center (SOC)?
A. A physical location where security personnel monitor and respond to security incidents.
B. A virtual location where security personnel monitor and respond to security incidents.
C. A centralized database of security incidents.
D. A set of security policies and procedures.
A
What is the main purpose of SOC tools?
A. To monitor and analyse security events in real-time.
B. To store security incidents for future reference.
C. To implement security policies and procedures.
D. To distribute security incidents to concerned authorities.
A
What is a Security Information and Event Management (SIEM) tool?
A. A tool that implements security policies and procedures.
B. A tool that monitors and analyses security events in real-time.
C. A tool that stores security incidents for future reference.
D. A tool that distributes security incidents to concerned authorities.
B
What is an Intrusion Detection System (IDS)?
A. A system that implements security policies and procedures.
B. A system that monitors and analyzes security events in real-time.
C. A system that stores security incidents for future reference.
D. A system that distributes security incidents to concerned authorities.
B
What is an Intrusion Prevention System (IPS)?
A. A system that implements security policies and procedures.
B. A system that monitors and analyzes security events in real-time.
C. A system that stores security incidents for future reference.
D. A system that prevents security incidents from occurring.
D
What is the purpose of a Vulnerability Management tool?
A. To monitor and analyze security events in real-time.
B. To store security incidents for future reference.
C. To identify and prioritize vulnerabilities in an organization’s network.
D. To prevent security incidents from occurring.
C
What is an Endpoint Detection and Response (EDR) tool?
A. A tool that implements security policies and procedures.
B. A tool that monitors and analyses security events in real-time.
C. A tool that stores security incidents for future reference.
D. A tool that provides security for endpoints such as laptops and mobile devices.
D
What is the key advantage of having centralized event management and reporting in SOC tools?
A. Improved visibility and control of security incidents.
B. Enhanced collaboration among security personnel.
C. Better integration with other security tools and systems.
D. All of the above.
D
What should be considered when evaluating SOC tools?
A. Requirements and limitations of the organization.
B. Cost and licensing model.
C. Deployment and scalability options.
D. Technical support and maintenance.
D
What is the importance of choosing the right SOC tool for an organization?
A. Improved visibility and control of security incidents.
B. Enhanced collaboration among security personnel.
C. Better integration with other security tools and systems.
D. All of the above.
D
