Advanced Threat Analytics Quiz

What you'll be asked

1. Which of the following security monitoring tools is primarily used to collect and correlate log data from various sources to detect security threats in real-time?
2. You notice an unusual spike in outbound traffic from a database server to an unknown external IP address at 3:00 AM. Which type of threat detection is most applicable here?
3. When configuring alerts for a security monitoring system, what is the primary risk of setting thresholds too low?
4. An attacker is performing 'Pass-the-Hash' lateral movement within your network. Which monitoring capability is most effective at detecting this specific identity-based threat?
5. In a sophisticated multi-stage attack, an adversary uses a 'low and slow' approach to exfiltrate data to avoid detection. Which advanced technique is required to identify this campaign?

Answers and explanations come after you submit.