Incident Handling

Which of the following are types of HTTP request methods? (Choose all that apply).

• PLACE

• GET

• POST

• HEAD

Which of the following HTTP response code indicate success?

• 500

• 300

• 200

• 400

A URL is composed of which two components?

• Protocol

• URI

• Domain

• IP

What encoding type is generally represented by a percent character "%" followed by two hexadecimal digits?

• Base32

• Base64

• Hashing

• URL Encoding

The following string is an example of what within an HTTP header? "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)"

• User Agent

• Content Type

• Cookie

• Referrer

Any occurrence in a network or system, such as opening a file or restarting the computer is considered what?

• Log

• Incident

• Event

• Anomaly

Which source of information would most likely contain events surrounding possible data exfiltration?

• IDS/IPS

• SIEM

• DLP

• EDR

Which source of information would most likely contain events surrounding vulnerability exploitation?

• IDS/IPS

• Antivirus

• DLP

• Firewall

Which defines the indication of a threat or alert when in actuality, there isn’t?

• True Negative

• True Positive

• False Positive

• False Negative

Which SOC deployment model outsources much or all of the activity?

• Internal

• MSSP

• Hybrid