GSLC

GSLC practice questions, page 4 of 5, with answer review and explanations.

Question 16

What process is demonstrated in the diagram shown below?

  1. Continuous Delivery
  2. Continuous Integration
  3. Continuous Improvement
  4. Continuous Deployment

Question 17

Once the SOC command center notifies the appropriate internal and external parties that an incident is taking place, what should happen next?

  1. Temporary measures should be put in place to prevent further damage to systems or the network
  2. The SOC should report the root cause of the incident to incident handlers and IT operations
  3. Procedures for restoring affected systems should be drafted by the incident handling team
  4. Forensics analysts should assess affected systems to assure malicious artifacts have been removed

Question 18

Which SOC metric measures the time an adversary remains in the network environment after the initial compromise?

  1. Dwell
  2. Identification
  3. Detection
  4. Containment

Question 19

When developing vulnerability remediation workflows, it is recommended that the majority of patches be categorized as which type of change?

  1. Manual
  2. Routine
  3. Critical
  4. Exception

Question 20

A SOC running 24 hours a day, including weekends, needs to fill a new analyst position. How many full time employees should the SOC hire to ensure coverage for all shifts, while still allowing vacations, training, and sick days?

  1. 3
  2. 5
  3. 8
  4. 2