PCDRA Practice Exam Questions and Answers

A.  

connecting unknown media to an endpoint that copied malware due to Autorun.

B.  

a user executing code which takes advantage of a vulnerability on a local service.

C.  

identifying vulnerable services on a server.

D.  

executing a process executable for well-known and signed software.

A.  

Remediation Automation

B.  

Machine Remediation

C.  

Automatic Remediation

D.  

Remediation Suggestions

A.  

It is true positive.

B.  

It is false positive.

C.  

It is a false negative.

D.  

It is true negative.

A.  

preventing the victim from being able to access APIs to cripple infrastructure

B.  

denying traffic out of the victims network until payment is received

C.  

restricting access to administrative accounts to the victim

D.  

encrypting certain files to prevent access by the victim

A.  

Agent Proxy

B.  

Agent Installer and Content Caching

C.  

Syslog Collector

D.  

CSV Collector

A.  

Only alerts with thesame host are grouped together into one Incident in a given time frame.

B.  

Alerts that occur within a three hour time frame are grouped together into one Incident.

C.  

Alerts with same causality chains that occur within a given time frame are grouped together into an Incident.

D.  

Every alert creates a new Incident.

A.  

Assign incidents to an analyst in bulk.

B.  

Change the status of multiple incidents.

C.  

Investigate several Incidents at once.

D.  

Delete the selected Incidents.

A.  

The ultimate goal of any exploit is to reach the application.

B.  

Kernel exploits are easier to prevent then application exploits.

C.  

The ultimate goal of any exploit is to reach the kernel.

D.  

Application exploits leverage kernel vulnerability.

A.  

Click the three dots on the widget andthen choose “Save” and this will link the query to the Widget Library.

B.  

This isn’t supported, you have to exit the dashboard and go into the Widget Library first to create it.

C.  

Click on “Save to Action Center” in the dashboard and you will be promptedto give the query a name and description.

D.  

Click on “Save to Widget Library” in the dashboard and you will be prompted to give the query a name and description.