GCIH Incident Detection & Analysis

Question 1

What is the primary objective of incident detection?

Accepted Answer

To identify and mitigate threats in real time

Answer

To prevent unauthorized access.

Answer

To identify network vulnerabilities.

Answer

To optimize network performance.

Question 2

Which type of incidents does intrusion detection primarily focus on?

Accepted Answer

Suspicious network activity and unauthorized access

Answer

System bugs and configuration issues.

Answer

Improper resource allocation.

Answer

Network performance issues.

Question 3

How does network monitoring contribute to incident detection?

Accepted Answer

It helps detect anomalies that could indicate an incident

Answer

It prevents all network errors.

Answer

It identifies vulnerabilities but does not detect threats.

Answer

It only identifies hardware failures.

Question 4

What is the role of log analysis in incident detection?

Accepted Answer

To identify unauthorized access and system malfunctions

Answer

To keep the system secure by filtering traffic.

Answer

To monitor system performance.

Answer

To optimize the network speed.

Question 5

What does the term 'false positive' mean in incident detection?

Accepted Answer

A non-threat activity flagged as an incident

Answer

A legitimate threat that was detected correctly.

Answer

An event that was not detected by the system.

Answer

A system malfunction.

Question 6

What is the purpose of incident correlation in incident detection?

Accepted Answer

To determine if multiple incidents are related

Answer

To ensure that no incidents are missed.

Answer

To combine unrelated alerts for better detection.

Answer

To minimize network downtime.

Question 7

What is the significance of a Security Information and Event Management (SIEM) system in incident detection?

Accepted Answer

To provide real-time analysis of security alerts

Answer

To monitor web traffic.

Answer

To detect vulnerabilities in the network.

Answer

To fix detected issues automatically.

Question 8

What is the role of network traffic analysis in incident detection?

Accepted Answer

To analyze traffic for signs of suspicious activity

Answer

To prevent unauthorized access.

Answer

To monitor system performance.

Answer

To fix detected issues in the network.

Question 9

How does incident response contribute to the detection process?

Accepted Answer

It helps respond to detected incidents promptly

Answer

It identifies vulnerabilities in the network.

Answer

It avoids logging any system errors.

Answer

It focuses on enhancing network performance.