Course 6 Sound the Alarm TEST QUESTIONS |
Latest Update 2026.
Advanced persistent threat (APT)
An instance when a threat actor maintains unauthorized access to a system for an extended
period of time
Analysis
The investigation and validation of alerts
Anomaly-based analysis
A detection method that identifies abnormal behavior
Array
A data type that stores data in a comma-separated ordered list
Broken chain of custody
Inconsistencies in the collection and logging of evidence in the chain of custody
Business continuity plan (BCP)
A document that outlines the procedures to sustain business operations during and after a
significant disruption
Chain of custody
The process of documenting evidence possession and control during an incident lifecycle
Command and control (C2)
, The techniques used by malicious actors to maintain communications with compromised systems
Command-line interface (CLI)
A text-based user interface that uses commands to interact with the computer
Common Event Format (CEF)
A log format that uses key-value pairs to structure data and identify fields and their
corresponding values
Computer security incident response teams (CSIRT)
A specialized group of security professionals that are trained in incident management and
response
Configuration file
A file used to configure the settings of an application
Containment
The act of limiting and preventing additional damage caused by an incident
Crowdsourcing
The practice of gathering information using public collaboration
Data exfiltration
Unauthorized transmission of data from a system
Data packet
A basic unit of information that travels from one device to another within a network
Latest Update 2026.
Advanced persistent threat (APT)
An instance when a threat actor maintains unauthorized access to a system for an extended
period of time
Analysis
The investigation and validation of alerts
Anomaly-based analysis
A detection method that identifies abnormal behavior
Array
A data type that stores data in a comma-separated ordered list
Broken chain of custody
Inconsistencies in the collection and logging of evidence in the chain of custody
Business continuity plan (BCP)
A document that outlines the procedures to sustain business operations during and after a
significant disruption
Chain of custody
The process of documenting evidence possession and control during an incident lifecycle
Command and control (C2)
, The techniques used by malicious actors to maintain communications with compromised systems
Command-line interface (CLI)
A text-based user interface that uses commands to interact with the computer
Common Event Format (CEF)
A log format that uses key-value pairs to structure data and identify fields and their
corresponding values
Computer security incident response teams (CSIRT)
A specialized group of security professionals that are trained in incident management and
response
Configuration file
A file used to configure the settings of an application
Containment
The act of limiting and preventing additional damage caused by an incident
Crowdsourcing
The practice of gathering information using public collaboration
Data exfiltration
Unauthorized transmission of data from a system
Data packet
A basic unit of information that travels from one device to another within a network
