Practice Exam 1
5 of this form’s 60 questions, drawn from across its domains, free. The explanation on every one of them is free too, at every tier, and always will be.
Question 1 of 5
Security MonitoringA SOC needs to watch traffic affecting many hosts on one switched segment without installing anything on those hosts. Which sensor placement fits?
Question 2 of 5
Security ConceptsA team subscribes to a feed of adversary indicators that has already been aggregated, analyzed, and enriched with context to guide decisions. What is this feed an example of?
Question 3 of 5
Security Policies and ProceduresFollowing the NIST incident response lifecycle, a team has just finished containing an incident. Which phase comes next?
Question 4 of 5
Network Intrusion AnalysisA proxy receives a request whose target is a full URI while the Host header names a different site. Which name does the proxy act on?
Question 5 of 5
Host-Based AnalysisA resource is protected by a mechanism that enumerates exactly which entities are permitted to access it, and denies everything else. What is this mechanism?
0 of 60 completed
The other 55 questions are the rest of this form: same 120 minute clock, same 750 cut score, and the same explanation on every question, which is never behind the wall. Practice Exam 1 of 2 on CyberOps Associate.
What this exam covers
- Security Concepts12 questions / 20% of the exam
- Security Monitoring15 questions / 25% of the exam
- Host-Based Analysis12 questions / 20% of the exam
- Network Intrusion Analysis12 questions / 20% of the exam
- Security Policies and Procedures9 questions / 15% of the exam
Checking what you already have access to.
Every question is original, written from the published objectives. We never reproduce, paraphrase, or imitate real exam content, and neither should anything else you study from.