ExamGecko
Question list
Search
Search

Question 155 - PCCET discussion

Report
Export

Which action must Secunty Operations take when dealing with a known attack?

A.
Document, monitor, and track the incident.
Answers
A.
Document, monitor, and track the incident.
B.
Limit the scope of who knows about the incident.
Answers
B.
Limit the scope of who knows about the incident.
C.
Increase the granularity of the application firewall.
Answers
C.
Increase the granularity of the application firewall.
D.
Disclose details of lhe attack in accordance with regulatory standards.
Answers
D.
Disclose details of lhe attack in accordance with regulatory standards.
Suggested answer: A

Explanation:

Security Operations (SecOps) is the process of coordinating and aligning security teams and IT teams to improve the security posture of an organization. SecOps involves implementing and maintaining security controls, technologies, policies, and procedures to protect the organization from cyber threats and incidents. When dealing with a known attack, SecOps must take the following action: document, monitor, and track the incident. This action is important because it helps SecOps to:

* Record the details of the attack, such as the source, target, impact, timeline, and response actions.

* Monitor the status and progress of the incident response and recovery efforts, as well as the ongoing threat activity and indicators of compromise.

* Track the performance and effectiveness of the security controls and technologies, as well as the lessons learned and improvement opportunities.

Reference:

* Palo Alto Networks Certified Cybersecurity Entry-level Technician (PCCET)

* 6 Incident Response Steps to Take After a Security Event - Exabeam

* Dealing with Cyber Attacks--Steps You Need to Know | NIST

asked 23/09/2024
Flora Hundal
32 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first