NSE Threat Analysis & Vulnerability Management 5

Question 1

Which FortiGate feature uses machine learning to detect anomalous network behavior and potential threats?

Accepted Answer

FortiAI / AI-based inspection

Answer

FortiAI leverages machine learning models within the FortiGate to analyze traffic patterns and detect anomalies indicative of threats beyond signature-based detection.

Question 2

An organization discovers a critical vulnerability in a system that cannot be patched immediately. Which compensating control is most appropriate?

Accepted Answer

Implement virtual patching via IPS rules to block exploitation attempts

Answer

Virtual patching uses IPS signatures to detect and block exploitation attempts against a known vulnerability, providing protection until a formal patch can be applied.

Question 3

What is the primary goal of threat intelligence sharing communities such as ISACs?

Accepted Answer

Enabling sector-specific organizations to share threat data to improve collective defenses

Answer

Information Sharing and Analysis Centers (ISACs) allow organizations within the same industry sector to share threat intelligence, enabling faster collective response to emerging threats.

Question 4

Which type of analysis examines malware by executing it in a controlled environment to observe behavior?

Accepted Answer

Dynamic analysis

Answer

Dynamic analysis executes malware in an isolated sandbox environment and observes its runtime behavior, including file system changes, network connections, and registry modifications.

Question 5

In the PASTA threat modeling framework, what does PASTA stand for?

Accepted Answer

Process for Attack Simulation and Threat Analysis

Answer

PASTA (Process for Attack Simulation and Threat Analysis) is a risk-centric threat modeling methodology that aligns business objectives with technical security requirements through a seven-stage process.

(NSE) Network Security Expert Practice Test

(NSE) Network Security Expert Practice Test

NSE Threat Analysis & Vulnerability Management 5