Cybersecurity Practitioner 270-400 Practice Questions & Answers • ExamPrepare

Question 1

An attacker moves throughout a network by using stolen administrator credentials to access file shares and systems via SMB.

Which MITRE ATT&CK technique does this describe?

Command and Control (C2)
Discovery
Lateral Movement
Reconnaissance

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

Which product functions as part of a SASE solution?

Prisma SD-WAN
Cortex
Kubernetes
Prisma Cloud

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

An attacker installs a script that adds a malicious binary to the system startup folder so that it runs every time the computer reboots.

Which technique is being used, according to the MITRE ATT&CK framework?

Credential Access
Persistence
Initial Access
Reconnaissance

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

Which action is unique to the security orchestration, automation, and response (SOAR) platforms?

Using predefined workflows
Prioritizing alerts
Enhancing data collection
Correlating incident data

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

Which two security elements are included in mobile device management (MDM)? (Choose two.)

Automated threat log review
Network access controls
Device licensing validation
Management of sanctioned applications

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

Which two descriptions apply to an XDR solution? (Choose two.)

It is designed for reporting on key metrics for cloud environments.
It employs machine learning (ML) to identify threats.
It is focused on single-vector attacks on specific layers of defense.
It ingests data from a wide spectrum of sources.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.