Which statement best describes the MITRE ATT&CK framework?

• A.Itprovides a high-level description of common adversary activities, but lacks technical details
• B.It covers tactics, techniques, and procedures, but does not provide information about mitigations.
• C.It describes attack vectors targeting network devices and servers, but not user endpoints.
• D.It contains some techniques or subtechniques that fall under more than one tactic.

Comment: *

Name: *

Email: *

Verification: *

Which MITRE ATT&CK technique category involves collecting information about the environment and systems?

• A.Credential Access
• B.Lateral Movement
• C.Exfiltration
• D.Discovery

Comment: *

Name: *

Email: *

Verification: *

Which three end user logs does FortiAnalyzer use to identify possible IOC compromised hosts? (Choose three.)

• A.Email filter logs
• B.DNS filter logs
• C.Application filter logs
• D.IPS logs
• E.Web filter logs

Comment: *

Name: *

Email: *

Verification: *

Refer to Exhibit:

A SOC analyst is designing a playbook to filter for a high severity event and attach the event information to an incident.
Which local connector action must the analyst use in this scenario?

• A.Get Events
• B.Update Incident
• C.Update Asset and Identity
• D.Attach Data to Incident

Comment: *

Name: *

Email: *

Verification: *

In the context of threat hunting, which information feeds are most beneficial?

• A.Marketing data
• B.Corporate governance updates
• C.Stock market trends
• D.Cyber threat intelligence

Comment: *

Name: *

Email: *

Verification: *