Trusted Advisor Security Quiz

What you'll be asked

1. Which of the following represents the primary goal of Security Operations (SecOps)?
2. When configuring a Security Information and Event Management (SIEM) system, what is the most important step to take after ingestion?
3. During an active security incident, what is the primary purpose of the 'Containment' phase in the incident response lifecycle?
4. Which security practice is most effective at reducing the risk of 'alert fatigue' within a Security Operations Center (SOC)?
5. In a sophisticated threat hunting scenario, why is it critical to focus on 'living-off-the-land' (LotL) techniques rather than just known malware signatures?

Answers and explanations come after you submit.