300-220

Review 46 300-220 practice questions with answer explanations and community insights.

Question 1

The Security Operations Center receives two alerts in security information and event management about two separate possible attacks. The first alert concerns brute force attempts on a domain controller, and the second attack concerns the flooding of a network. After an initial investigation, the team confirms that both alerts are valid and begins a detailed investigation.According to the CAPEC model, which vulnerability criteria should the team prioritize in the investigation?

  1. quickest mitigation actions
  2. highest probability of attack
  3. highest typical severity
  4. most discovered weaknesses

Question 2

Which threat hunting methodology aims to understand how adversaries think?

  1. intel-driven
  2. hybrid
  3. entity-driven
  4. TTP-driven

Question 3

What should be considered when using machine learning for data analysis in a SOC?

  1. More professionals are needed to maintain the system.
  2. Security gaps can occur during the early stages of development.
  3. Machine learning is unsuited for small organizations.
  4. Constant tuning is required for data analysis to be effective.

Question 4

According to the MITRE ATT&CK framework, how is the password spraying technique classified?

  1. initial access
  2. credential access
  3. lateral movement
  4. privilege escalation

Question 5

How does multiproduct integration enhance data visibility and analysis in a corporate environment?

  1. Different teams use different tools so that they can crosscheck their results.
  2. A central data visualizer is integrated into the APIs of the products to correlate input.
  3. Backup tools are in place for use when the main tools are unavailable.
  4. Different GUIs are used to get different views of the same events.
We are moving to a new platform

CertificationTest is being migrated. Some pages may be slow or briefly unavailable; everything will be back to normal within a few hours. If you run into any issue, email support@certificationtest.net.