[QZ] NSSECU1 DEFENSIVE SECURITY

Which of the following BEST describes the primary goal of a Security Operations Center (SOC)?

A SOC analyst receives an alert from the SIEM platform about multiple failed login attempts on a critical server. Which tool MOST LIKELY generated this alert?

Which type of security control is an Intrusion Detection System (IDS) classified as, based on its functionality?

An organization deploys physical access controls, logical/technical controls, and administrative controls in layers so that if one layer is breached, the attacker is stopped by the next. What strategy does this describe?

An employee is required to agree to a document that outlines what they can and cannot do when using the company's computers and network resources. What type of document is this?

A company enters into a legal contract with a partner firm, restricting both parties from sharing confidential information obtained during their collaboration. What type of agreement is this?

Republic Act No. 10173, also known as the Data Privacy Act of 2012, was signed into law in the Philippines to protect personal data. Which of the following violations carries the HIGHEST maximum fine for Sensitive Personal Information (SPI)?

Which international standard specifically provides requirements for establishing, implementing, and maintaining an Information Security Management System (ISMS)?

A type of malware self-replicates and spreads across a network without requiring any user interaction. Which malware type is this?

CryptoMalware is considered a new generation of ransomware. What is its defining characteristic that differentiates it from traditional ransomware?

A security analyst receives a suspicious email with the subject "URGENT: Validate your account immediately." The email is addressed to "Dear user," contains a link to an unfamiliar website, and threatens account deactivation. Which characteristic of this email is the STRONGEST indicator of a phishing attempt?

A malware embeds its starting code into the boot sector of a storage device, activating before the operating system loads. What type of virus is this?

Which of the following online tools allows a security analyst to scan a suspicious URL or file hash against multiple antivirus engines simultaneously?

The ILOVEYOU worm caused an estimated $5.5 to$8.7 billion in damages worldwide. Where did this worm originate?

Which of the following is NOT included in the RA 10173 compliance checklist under "Manage Security Risks"?