SOC Readiness Quiz

QUESTION 1 – During SOC Implementation, what is the first step that must be taken?*
- Designing and Building the SOC
- Hiring Employees for the SOC
- Operating the SOC
- Planning

QUESTION 2 – Which one of the following is NOT a SOC Key Performance Indicator (KPI)?*
- Response Time
- Operations Audit
- Round Trip Time (RTT)
- Over time

QUESTION 3 – Which of the following is the equation for an attack?*
- Attack=Motive (Goal) + Method (TTPs) + Vulnerability
- Attack=Motive (Goal) + Skills (Capability) + Accessibility
- Attack=Attitude (Anger) + Method (TTPs) + Vulnerability
- Attack=Reason (Why) + Season (When) + Ability

QUESTION 4 – What type of sensitive information CANNOT be obtained through sniffing?*
- Syslog traffic
- FTP Passwords
- NTLMv2 passwords
- Router Configuration

QUESTION 5 – Which command can be used to monitor and analyze a linux logfile named program.log?*
- Get-ChildItem C:\program.log
- Dir c:\progam.log
- ls ./program.log
- tail ./program.log

QUESTION 6 – Which of the following commands will view the firewall log of a Cisco ASA*
- show logging | grep ASA-4
- log print c:\windows\system32\logs\ASA-4
- display.log c:\windows\system32\logs\ASA-4
- ls \var\log\ASA-4

QUESTION 7 – Which is NOT a SIEM Use Case*
- detection logic, signature, or correlation logic
- A rule, report, alert, or dashboard that satisfies a set of needs or requirements
- Investigation into why the SIEM has been implemented
- the goals behind the SIEM implementation which enables successful implementation

QUESTION 8 – Fred, who is involved in forensics for his IH&R (Incident Handling and Response) team is attempting to search logs for a XSS (Cross Site Scripting) attempt. Which Regex statement should he use?*
- /((\%3C)|)/ix
- /((\%3D)|(=))[^\n]*((\%27)|(\')|(\-\-)|(\%3B)|(;))/i
- wget -r -nd --reject-regex='.*'
- /exec(\s|\+)+(s|x)p\w+/ix

QUESTION 9 – Which type of TI (Threat Intelligence) is Strategic?*
- It provides information about specific threats against the organization
- It is generally in the form of a report that mainly focuses on high-level business strategies
- It includes highly technical information such as malware, campaigns, techniques, tools, etc
- . It helps IR and forensics teams in deploying security assets with the aim of identifying and stopping upcoming attacks

Please submit form to see your quiz results.
Name*
First Last
Address*
Street Address Address Line 2 City State / Province / Region ZIP / Postal Code Country
Phone*
Email*
How would you like to be contacted?*
- Phone
- Email
Select*
Please confirm by checking the box below that you consent to EC-Council contacting you with the results from the quiz as well as the certification program(s) relevant to the quiz content. Your information will not be shared with any third party. Please see our full privacy policy here.
We care about your data privacy. We will only collect your data via this form if you agree to our terms of use. If you do not agree to the collection of your data, we will not be able to send you the information you have requested.
CAPTCHA

Are you ready for the SOC exam?
Test your skills!