CCNA Cyber Ops SECOPS Flashcards

Decks in this Class (19):

• Secops 1 Defining The Soc

  SECOPS 1: Defining the SOC

  Sample Cards:

  three soc types,

  threat centric soc,

  before an attack
  24 Cards
  Preview Flashcards
• Secops 2 Nsm Tools And Data

  SECOPS 2: NSM Tools and Data

  Sample Cards:

  session data,

  full packet capture format,

  full content data
  11 Cards
  Preview Flashcards
• Security Onion

  Security Onion

  Sample Cards:

  networkminer
  1 Cards
  Preview Flashcards
• Secops 3 Incident Analysis In A Threat C

  SECOPS 3: Incident Analysis in a Threat Centric SOC

  Sample Cards:

  kill chain steps,

  what is a kill chain,

  weaponization
  20 Cards
  Preview Flashcards
• Secops 4 Hunting Cyber Threats

  SECOPS 4: Hunting Cyber Threats

  Sample Cards:

  hm0,

  hm1,

  hm2
  41 Cards
  Preview Flashcards
• Secops 5 Event Correlation And Normaliza

  SECOPS 5: Event correlation and normalization

  Sample Cards:

  event data type for dhcp,

  event data type for dns,

  event data type for aaa
  23 Cards
  Preview Flashcards
• Secops 6 Common Attack Vectors

  SECOPS 6: Common Attack Vectors

  Sample Cards:

  goal of obfuscating javascript code,

  eval,

  dom
  32 Cards
  Preview Flashcards
• Secops 7 Identifying Malicious Activity

  SECOPS 7: Identifying Malicious Activity

  Sample Cards:

  deterministic assessment method,

  probabilistic assessment method,

  syslog tag field
  8 Cards
  Preview Flashcards
• Regex

  Regex

  Sample Cards:

  pcre,

  a c,

  w
  14 Cards
  Preview Flashcards
• Secops 9

  SECOPS 9

  Sample Cards:

  when did events occur,

  who,

  where did the infection come from
  8 Cards
  Preview Flashcards
• Secops 10 Soc Playbook Not Needed For Th

  SECOPS 10: SOC Playbook (Not needed for the exam)

  Sample Cards:

  security analytics is accomplished by,

  bgp black holing,

  iam security device has an unexpected fe
  13 Cards
  Preview Flashcards
• Secops 11 Soc Metrics

  SECOPS 11: SOC Metrics

  Sample Cards:

  siem functions,

  ttd,

  ttd defined
  7 Cards
  Preview Flashcards
• Secops 12 Soc Wms And Automation

  SECOPS 12: SOC WMS and Automation

  Sample Cards:

  wms,

  tool to orchestrate automate ir process,

  wms aka
  18 Cards
  Preview Flashcards
• Secops 13 Incident Response Plan

  SECOPS 13: Incident Response Plan

  Sample Cards:

  ir plan questions 4,

  ir lifecycle 7,

  preparation phase
  20 Cards
  Preview Flashcards
• Appendix A Csirt

  Appendix A: CSIRT

  Sample Cards:

  coordination centers,

  analysis centers,

  vendor teams
  13 Cards
  Preview Flashcards
• Appendix B Veris

  Appendix B: VERIS

  Sample Cards:

  veris,

  veris 4 as,

  veris incident tracking
  8 Cards
  Preview Flashcards
• Rfi

  RFI

  Sample Cards:

  dread,

  integrity protection encompasses,

  dread stride
  36 Cards
  Preview Flashcards
• Nist 800 61r2

  NIST 800-61r2

  Sample Cards:

  which phase do you use search engines,

  identifying attacking host,

  perform event correlation
  9 Cards
  Preview Flashcards
• Blueprint

  Blueprint

  Sample Cards:

  cvss attack vector,

  cvss attack complexity,

  cvss privileges required
  60 Cards
  Preview Flashcards