フリー問題

Conducting Threat Hunting and Defending Using Cisco Technologies for Cybersecurity のフリー問題 6 / 20 問目

問題文

The only input a team holds is a report about one named operator and the behaviors that operator is known for. Which way of running the next hunt does that input point to?

選択肢

  1. Reproduce the actions of the operator in a laboratory and record which of the products report them and which stay silent.
  2. State where those behaviors would show up in this estate and search only inside the scope drawn around that statement.
  3. Measure how much of the published catalog the current rules already cover and report the share that no rule watches.
  4. Open up whichever dataset has only just been made available and look through it for whatever happens to stand out from the rest.

解答・解説を確認するには

正解と解説の確認、回答の記録には無料登録が必要です。登録すると演習モードでフリー問題に回答し、正誤と解説をその場で確認できます。