Which process is used when IPS events are removed to improve data integrity?

Answer(s): B

An analyst is investigating an incident in a SOC environment.
Which method is used to identify a session from a group of logs?

Answer(s): C

What is a difference between SOAR and SIEM?

SOAR platforms are used for threat and vulnerability management, but SIEM applications are not
SIEM applications are used for threat and vulnerability management, but SOAR platforms are not
SOAR receives information from a single platform and delivers it to a SIEM
SIEM receives information from a single platform and delivers it to a SOAR

Answer(s): A

What is the difference between mandatory access control (MAC) and discretionary access control (DAC)?

MAC is controlled by the discretion of the owner and DAC is controlled by an administrator
MAC is the strictest of all levels of control and DAC is object-based access
DAC is controlled by the operating system and MAC is controlled by an administrator
DAC is the strictest of all levels of control and MAC is object-based access

Answer(s): B

Free 200-201 Exam Braindumps (page: 4)