1. If a system sends an alert that a user account is being hacked because of too many password failures, bur analysis shows that the person's device had cached an old password, triggering the failures, what is this an example of?

A. False negative

B. False Postive

C. Measurement Error

D.Analysis failure

2. What is the primary limitation of a credentialed scan on a network?

A. speed

B. Examining too deeply into individual boxes

C.The inability to scale across multiple systems

D. slowing down your network with ancillary traffic

3. Which of the following is not part of SIEM processes?

A. Incident investigation

B. Event correlation

C. Data Collection

D. Alerting/ Reporting

4. What an attacker moves to a new machine and rescans the network to look for machines not previously visible, what is this technique called?

A. phasing

b. prescience

c. lateral movements

d. privilege escaltion