Online Access Free 300-220 Practice Test

Which of the following best describes an advanced persistent threat (APT)?

• A.An opportunistic ransomware attack
• B.A quickly evolving malware variant
• C.A long-term, targeted attack campaign
• D.A short-term financial fraud scheme

________ threat hunting is based on the exploration of data with the goal of finding unknown threats.

• A.Unstructured
• B.Structured
• C.Hypothesis-driven
• D.Formalized

A comprehensive playbook addresses which phases of incident response? (Choose two)

• A.Budget planning
• B.Detection
• C.Recovery
• D.Lunch break scheduling

Structured threat hunting differs from unstructured threat hunting in that it:

• A.Is based on specific hypotheses or indicators
• B.Requires predefined datasets for analysis
• C.Is more ad hoc and relies on the hunter's intuition
• D.Does not require any prior knowledge of threats

What indicates a successful C2 communication detection using endpoint logs? (Choose two)

• A.Unusual process tree formations
• B.Increased outbound traffic to unknown IPs
• C.High volume of encrypted data sent to known ports
• D.Frequent system reboots