Cyber Security Jobs Cyber Security Software 2 — Questions and Answers
Question 1: Which type of software primarily aggregates and correlates log data from across an enterprise to detect threats?
- SIEM (Correct answer)
- VPN
- DLP
- EDR
Correct answer: SIEM
A SIEM (Security Information and Event Management) collects, correlates, and analyzes log data from multiple sources.
Question 2: What is the main function of an EDR (Endpoint Detection and Response) tool?
- Encrypt network traffic
- Monitor and respond to threats on endpoints (Correct answer)
- Manage user passwords
- Block spam email
Correct answer: Monitor and respond to threats on endpoints
EDR continuously monitors endpoints to detect, investigate, and respond to suspicious activity.
Question 3: Which open-source tool is most associated with network packet capture and analysis?
- Wireshark (Correct answer)
- Photoshop
- Jenkins
- Tableau
Correct answer: Wireshark
Wireshark is the industry-standard tool for capturing and inspecting network packets.
Question 4: A DLP solution is designed mainly to prevent what?
- Slow website loading
- Unauthorized data exfiltration (Correct answer)
- Hardware failure
- Software licensing issues
Correct answer: Unauthorized data exfiltration
Data Loss Prevention (DLP) tools detect and block sensitive data from leaving the organization.
Question 5: Which tool is commonly used for automated vulnerability scanning of networks and hosts?
- Nessus (Correct answer)
- Slack
- Notepad
- Spotify
Correct answer: Nessus
Nessus is a widely used vulnerability scanner that identifies misconfigurations and known flaws.
Question 6: What does a SOAR platform add beyond a traditional SIEM?
- Faster Wi-Fi
- Automated orchestration and incident response (Correct answer)
- Cheaper hardware
- Better graphics
Correct answer: Automated orchestration and incident response
SOAR (Security Orchestration, Automation, and Response) automates playbooks and coordinates response actions.
Question 7: Which software category would you use to manage and rotate privileged account credentials?
- PAM (Correct answer)
- CDN
- ERP
- CRM
Correct answer: PAM
Privileged Access Management (PAM) secures, controls, and rotates high-level credentials.
Cyber Security Jobs Cyber Security Software 2
Which type of software primarily aggregates and correlates log data from across an enterprise to detect threats?