Fortinet NSE2 - Threat Intelligence Services Quiz Answers
Fortinet NSE2
Threat Intelligence Services Quiz Answers
More Possible Questions
Q Which statement about cyber-attacks is true?
Ans - Security products and threat intelligence services that can act together in real time stand the best chance of stopping these attacks
Q Which are three functions of sandboxing?
Ans - Depending on the configuration, the owner of the sandbox can propagate this new knowledge across their network security environment
Sandboxing products take a suspect file and places it in an environment where its behaviors can be closely analyzed
Sandboxes can send the details to the vendor's threat intelligence service so that the details can be shared worldwide
Q What happens when each known malware file is represented by a one-to-one signature approach?
Ans - It does not scale well, because the number of malware files increases by millions or more each day
Q What happened when malware became more sophisticated and able to change its own file content?
Ans - A single type of malware became an entire malware family, consisting of perhaps thousands of different files, but each file performing the same bad behaviors
Q The threat intelligence service catalogs data about existing or emerging attacks, including the specific mechanisms of the attack, and evidence that the attack has happened. What is this data also known as?
Ans - Indicators of compromise
Q What is the sandbox detection method known as?
Ans - Heuristic detection
Q Which method best defeats unknown malware?
Ans - Sandboxing