Cyber Security Jobs Cyber Security Software 2

Question 1

Which type of software primarily aggregates and correlates log data from across an enterprise to detect threats?

Accepted Answer

SIEM

Answer

A SIEM (Security Information and Event Management) collects, correlates, and analyzes log data from multiple sources.

Question 2

What is the main function of an EDR (Endpoint Detection and Response) tool?

Accepted Answer

Monitor and respond to threats on endpoints

Answer

EDR continuously monitors endpoints to detect, investigate, and respond to suspicious activity.

Question 3

Which open-source tool is most associated with network packet capture and analysis?

Accepted Answer

Wireshark

Answer

Wireshark is the industry-standard tool for capturing and inspecting network packets.

Question 4

A DLP solution is designed mainly to prevent what?

Accepted Answer

Unauthorized data exfiltration

Answer

Data Loss Prevention (DLP) tools detect and block sensitive data from leaving the organization.

Question 5

Which tool is commonly used for automated vulnerability scanning of networks and hosts?

Accepted Answer

Nessus

Answer

Nessus is a widely used vulnerability scanner that identifies misconfigurations and known flaws.

Cyber Security Jobs Practice Test