Free Cisco 300-220 Exam Questions

After a multi-week threat hunting exercise, a security team confirms that an attacker gained access using valid credentials, moved laterally, and exfiltrated data without deploying malware. Senior leadership asks how the hunting program reduced organizational risk. Which outcome BEST demonstrates the value of threat hunting?

Which technique involves monitoring and analyzing the behavior of endpoints within an organization's network?

What is the first step in the threat hunting process?

What is the term used to describe the process of analyzing the code and behavior of malware to attribute its origin to a specific threat actor?

Which threat modeling technique focuses on evaluating the impact of threats on business objectives?