A Security Operations (SecOps) Manager is considering implementing threat hunting to be able to make better decisions on protecting information and assets.
What is the MAIN goal of threat hunting to the SecOps Manager?
I vaguely recall that threat hunting shouldn't replace existing strategies, so I doubt option C is correct. It’s more about complementing what we already have.
I practiced a question similar to this, and I feel like validating patterns of behavior is crucial for understanding attacks, so maybe option D is the right choice.
I remember threat hunting is about proactively searching for threats, but I'm not sure if the main goal is to validate attack patterns or improve detection.
This seems like a pretty straightforward question. The answer is clearly using an agent action in the ESM Console. I don't think the other options are relevant here, as they don't specifically mention changing the uninstall password after the initial installation.
B seems like the right answer to me. The question specifically mentions using the Azure Virtual Desktop Insights solution, which integrates with Log Analytics.
upvoted 0 times
...
Log in to Pass4Success
Sign in:
Report Comment
Is the comment made by USERNAME spam or abusive?
Commenting
In order to participate in the comments you need to be logged-in.
You can sign-up or
login
Pamela
4 months agoTalia
4 months agoMariko
4 months agoTiera
4 months agoLajuana
4 months agoThea
5 months agoKris
5 months agoYun
5 months agoFlorencia
5 months agoLynda
5 months agoTawny
5 months agoLisbeth
5 months ago