Free 300-220 – Conducting Threat Hunting and Defending using Cisco Technologies for Cybersecurity (CBRTHD) Practice Test Question

Select an option, then click Submit answer.

• ○ Proactive, hypothesis-driven search for undetected threats
• ○ Reactive alert triage only
• ○ Automated patching of hosts
• ○ Quarterly vulnerability scanning

Select an option, then click Submit answer.

• ○ Severity of business impact
• ○ Pain denial causes each adversary type
• ○ Cost of security tools
• ○ Analyst skill levels needed

Select an option, then click Submit answer.

• ○ Hash values
• ○ IP addresses
• ○ Tactics, techniques, and procedures (TTPs)
• ○ Domain names

Select an option, then click Submit answer.

• ○ Initial: reliance on alerts only
• ○ Managed: some log collection
• ○ Defined: documented procedures
• ○ Automated hunting, custom analytics

Select an option, then click Submit answer.

• ○ Unknown variants and LOLBin abuse
• ○ They lack storage space
• ○ They only run weekly
• ○ They require manual updates hourly

Select an option, then click Submit answer.

• ○ It never needs tuning
• ○ False results and data bias
• ○ It replaces all analyst judgment
• ○ It explains itself perfectly

Select all that apply, then click Submit answer.

• ○ File hash values
• ○ IP addresses
• ○ Adversary TTPs
• ○ Analyst procedures

Select all that apply, then click Submit answer.

• ○ Scale and speed of triage
• ○ Guaranteed zero false negatives
• ○ Alert fatigue from noisy models
• ○ Elimination of analyst roles

Answer is in the explanation below.

Answer is in the explanation below.

Select all that apply, then click Submit answer.

• ○ Prioritizing where to disrupt attacks
• ○ Computing hash values
• ○ Encrypting backups
• ○ Mapping detections to attack stages

Answer is in the explanation below.