1. Which of the following terms best describes an effort to manage and integrate multiple disparate security automation processes and tools?

2. Which of the following automated methods is used to write interfaces between applications to exchange data and facilitate inter-application task management?

3. Joseph is examining raw data obtained from various log files and other sources within his network. However, it is very difficult for him to analyze what this data means without understanding why and how it was created and how it relates to various potential threats and vulnerabilities. Which of the following would allow Joseph to view this data in a much more productive way, allowing him to perform a more comprehensive analysis of the raw data?

4. Ben is analyzing different attack surfaces in his organization. Which of the following should he do on individual hosts to reduce their attack surface?

5. You are evaluating a set of recommended controls for implementation to reduce the risk for a system. The system is valued at $1 million, accounting for its replacement cost, data, and current revenue. The controls you wish to implement cost almost as much as the system but significantly reduce risk to almost a negligible level. Which is the most likely choice you should make?

6. Jared is a cybersecurity analyst tasked with determining which applications should be allowed to run on the company's network. Jared has selected a list of applications that should be allowed and determined that no one else should be able to run additional applications without going through an extensive approval process. Which of the following should Jared implement?

7. You are a cybersecurity analyst who has been tasked to review logs from over 200 individual hosts that make up your network. After two weeks of trying and failing to visit every single host to review their logs, you decide to come up with a better solution. Which of the following is the best solution for examining large numbers of logs in a central location?

8. Which of the following automated methods is used to write interfaces between applications to exchange data and facilitate inter-application task management?

9. Ethan is implementing a firewall solution for a sensitive internal network. The resources he is protecting contain sensitive web-based accounting applications that should not be accessible by any other users outside of the accounting department. Which of the following firewall solutions should he consider?

10. Sam is a cybersecurity analyst who has been performing threat hunting on his infrastructure and has discovered some disturbing issues with the ability of the organization to detect potential threats. Which of the following actions should he take?

11. You are a cybersecurity analyst tasked with ensuring vulnerability scans begin at specified times of the night throughout the week. The vulnerability scanning software you are using does not allow for scheduled tasks. Which of the following would be the most efficient method for scheduling and executing the vulnerability scans at the prescribed times?

12. Ethan is implementing a firewall solution for a sensitive internal network. The resources he is protecting contain sensitive web-based accounting applications that should not be accessible by any other users outside of the accounting department. Which of the following firewall solutions should he consider?

13. Evie is a cybersecurity analyst who has discovered some potential threats on the network. She is trying to put together information about the characteristics of the threat and information about the threat actor as well as to discover some of their tactics and techniques. What is this process called?

14. Sam is a cybersecurity analyst who has been performing threat hunting on his infrastructure and has discovered some disturbing issues with the ability of the organization to detect potential threats. Which of the following actions should he take?

15. Which of the following terms best describes an effort to manage and integrate multiple disparate security automation processes and tools?

16. Evie is a cybersecurity analyst who has discovered some potential threats on the network. She is trying to put together information about the characteristics of the threat and information about the threat actor as well as to discover some of their tactics and techniques. What is this process called?

17. Ben is analyzing different attack surfaces in his organization. Which of the following should he do on individual hosts to reduce their attack surface?