INTRODUCTION – Introduction to Cybersecurity Tools

TEST YOUR KNOWLEDGE: SECURITY INFORMATION AND EVENT MANAGEMENT (SIEM) DASHBOARDS

1. Which log source records events related to websites, emails, and file shares, as well as password and username requests?

2. Fill in the blank: A security information and _____ management (SIEM) tool is an application that collects and analyzes log data to monitor critical activities in an organization.

3. A security professional evaluates a software application by reviewing key technical attributes including response time, availability, and failure rate. What are they using to assess performance?

4. Fill in the blank: SIEM tools must be configured and _____ to meet each organization’s unique security needs.

TEST YOUR KNOWLEDGE: IDENTIFY THREATS AND VULNERABILITIES WITH SIEM TOOLS

1. A security team wants some of its services to be hosted on the internet instead of local devices. However, they also need to maintain physical control over certain confidential data. What type of SIEM solution should they select?

2. Security information and event management (SIEM) tools provide dashboards that help cybersecurity professionals organize and focus their security efforts.

3. Fill in the blank: A _____ SIEM tool is specifically designed to take advantage of cloud computing capabilities including availability, flexibility, and scalability.

4. What are the different types of SIEM tools? Select three answers.

MODULE 3 CHALLENGE

1. Which of the following statements correctly describe logs? Select three answers.

2. What are some of the key benefits of SIEM tools? Select three answers.

3. Fill in the blank: Software application _____ are technical attributes, such as response time, availability, and failure rate.

4. A security team chooses to implement a SIEM tool that will be managed and maintained by the organization’s IT department, rather than a third-party vendor. What type of tool are they using?

5. You are a security professional, and you want a SIEM tool that will require both on-site infrastructure and internet-based solutions. What type of tool do you choose?

6. Fill in the blank: SIEM tools are used to search, analyze, and _____ an organization’s log data to provide security information and alerts in real-time.

7. Which tool provides a comprehensive, visual summary of security-related data, including metrics?

8. Fill in the blank: _____ tools are often free to use.

9. What are some of the key benefits of SIEM tools? Select three answers.

10. Fill in the blank: A security professional creates a dashboard that displays technical attributes about business operations called ______, such as incoming and outgoing network traffic.

11. A security team installs a SIEM tool within their company’s own infrastructure to keep private data on internal servers. What type of tool are they using?

12. You are a security analyst, and you want a security solution that will be fully maintained and managed by your SIEM tool provider. What type of tool do you choose?

13. Fill in the blank: _____ are used to retain, analyze, and search an organization’s log data to provide security information and alerts in real-time.

14. Which of the following statements correctly describes logs? Select three answers.

15. What are some of the key benefits of SIEM tools? Select three answers.

16.  A security team chooses to implement a SIEM tool that they will install, operate, and maintain using their own physical infrastructure. What type of tool are they using?

17. You are a security professional, and you want to save time by using a SIEM tool that will be managed by a provider and only be accessible through the internet. What type of tool do you choose?

18. A security analyst receives an alert about hundreds of login attempts from unusual geographic locations within the last few minutes. What can the analyst use to review a timeline of the login attempts, locations, and time of activity?

19. Fill in the blank: The wide exposure and immediate access to the source code of open-source tools makes it _____ likely that issues will occur.

20. Which of the following statements Correctly describe logs? Select three answers.

21. After receiving an alert about a suspicious login attempt, a security analyst can access their _____ to gather information about the alert.

22. Which type of tool typically requires users to pay for usage?