Threat Identification Techniques Quiz

What you'll be asked

1. Which of the following activities is best described as a passive threat identification technique?
2. A security analyst is using an automated tool to identify missing patches and misconfigurations on internal servers. What is this process called?
3. When conducting threat hunting, which of the following is considered a 'Hypothesis-Driven' approach?
4. Which of the following best describes the role of a CVSS score in vulnerability management?
5. You are analyzing a potential incident and identify a persistent connection to a known malicious command-and-control (C2) IP address. According to the Diamond Model of Intrusion Analysis, which vertex does this specific indicator fall under?

Answers and explanations come after you submit.