GIAC Security Operations Certified Sample Questions:
1. Your organization has recently implemented a new analytic system designed to monitor security alerts from various sources, including endpoint logs, network traffic, and SIEM dat a. However, the incident response team is reporting difficulty in prioritizing alerts and is experiencing alert fatigue. After reviewing the situation, you decide to adjust the analytics model to improve its performance.
Which of the following adjustments would help reduce alert fatigue while maintaining accuracy?
(Choose Three)
Response:
A) Cross-validate the model with different datasets to improve accuracy
B) Disable alerts that originate from known, trusted systems
C) Set up automatic responses for every alert
D) Implement feedback loops from incident responders to refine alert criteria
E) Use machine learning techniques to group related alerts
2. Why is it important to maintain a dynamic and adaptable triage process?
Response:
A) So that the process becomes less predictable to attackers
B) To comply with international laws only
C) To ensure that the process can be the same for every type of organization
D) Because the threat landscape and organizational priorities are constantly changing
3. In the context of Linux, what is the significance of the '/var/log/dmesg' file?
Response:
A) It contains kernel ring buffer messages.
B) It records all the user-level messages.
C) It logs user authentication events exclusively.
D) It details the package management system logs.
4. Which HTTP status code indicates that the requested resource is temporarily available at a different URI, as provided by the Location header?
Response:
A) 301 Moved Permanently
B) 404 Not Found
C) 302 Found
D) 200 OK
5. Which of the following factors should be considered when triaging security incidents?
(Choose Two)
Response:
A) The severity of the threat or attack
B) The number of users online at the time of the incident
C) The potential impact on business-critical systems
D) The geographical location of the incident responder
Solutions:
| Question # 1 Answer: A,D,E | Question # 2 Answer: D | Question # 3 Answer: A | Question # 4 Answer: C | Question # 5 Answer: A,C |
968 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
