Online Access Free GSOC Practice Test

Which of the following factors should be considered when triaging security incidents?
(Choose Two)
Response:

• A.The geographical location of the incident responder
• B.The potential impact on business-critical systems
• C.The severity of the threat or attack
• D.The number of users online at the time of the incident

Which of the following practices can improve SOC efficiency through automation?
(Choose Two)
Response:

• A.Using playbooks for common incident response scenarios
• B.Automating the triage of low-severity alerts
• C.Reviewing logs manually every quarter
• D.Disabling automated processes for critical incidents

In the context of endpoint security, why is user training essential?
Response:

• A.Educated users are less likely to fall victim to phishing attacks that could compromise endpoints.
• B.Users prefer to be part of technical troubleshooting processes.
• C.Training allows users to take over the IT department's responsibilities for endpoint security.
• D.Users need to understand how to bypass security features when they find them inconvenient.

What is the purpose of DNSSEC in securing the DNS protocol?
Response:

• A.To encrypt all DNS traffic
• B.To authenticate DNS responses and protect against DNS spoofing
• C.To reduce DNS query times
• D.To block all DNS requests from external sources

Which file in Linux contains information about previous boot messages?
Response:

• A./etc/fstab
• B./boot/grub/grub.cfg
• C./var/log/boot.log
• D./var/log/cron