SOT-001 CompTIA Practice Questions

Question #1 (Topic: demo questions)

Which threat uses trusted system tools to avoid detection?

A.

Ransomware

B.

File less malware

C.

Boot sector virus

D.

Macro virus

Correct Answer: B

Explanation:

File less malware leverages legitimate system tools and memory execution, making it harder to detect using traditional antivirus solutions.

Question #2 (Topic: demo questions)

Which phase of the attack lifecycle involves gaining initial access?

A.

Command and control

B.

Reconnaissance

C.

Delivery and exploitation

D.

Exfiltration

Correct Answer: C

Explanation:

Delivery and exploitation is the phase where attackers deliver payloads and exploit vulnerabilities to gain access to systems.

Question #3 (Topic: demo questions)

The MITRE ATT&CK framework is best described as:

A.

A vulnerability scoring system

B.

A compliance auditing framework

C.

A knowledge base of adversary tactics and techniques

D.

A penetration testing tool

Correct Answer: C

Explanation:

MITRE ATT&CK documents real-world adversary behaviors and maps tactics and techniques used during cyber attacks. It helps SOC teams improve detection and response.

Question #4 (Topic: demo questions)

A Tier 1 SOC analyst is mainly responsible for:

A.

Threat hunting and malware reverse engineering

B.

Initial alert triage and escalation

C.

Developing security policies

D.

Performing forensic investigations

Correct Answer: B

Explanation:

Tier 1 analysts handle initial alert review, validation, and escalation to higher tiers if required. They focus on monitoring dashboards and identifying false positives.

Question #5 (Topic: demo questions)

A Security Operations Center (SOC) primarily exists to:

A.

Develop new software applications

B.

Monitor, detect, and respond to security threats

C.

Manage corporate finance systems

D.

Perform marketing analytics

Correct Answer: B

Explanation:

A SOC focuses on continuous monitoring, threat detection, and incident response to protect organizational assets. It acts as the central hub for security operations and response activities.

CompTIA SOT-001 - CompTIA Certification Exam

Which threat uses trusted system tools to avoid detection?

Ransomware

File less malware

Boot sector virus

Macro virus

Correct Answer: B

File less malware leverages legitimate system tools and memory execution, making it harder to detect using traditional antivirus solutions.

Which phase of the attack lifecycle involves gaining initial access?

Command and control

Reconnaissance

Delivery and exploitation

Exfiltration

Correct Answer: C

Delivery and exploitation is the phase where attackers deliver payloads and exploit vulnerabilities to gain access to systems.

The MITRE ATT&CK framework is best described as:

A vulnerability scoring system

A compliance auditing framework

A knowledge base of adversary tactics and techniques

A penetration testing tool

Correct Answer: C

MITRE ATT&CK documents real-world adversary behaviors and maps tactics and techniques used during cyber attacks. It helps SOC teams improve detection and response.

A Tier 1 SOC analyst is mainly responsible for:

Threat hunting and malware reverse engineering

Initial alert triage and escalation

Developing security policies

Performing forensic investigations

Correct Answer: B

Tier 1 analysts handle initial alert review, validation, and escalation to higher tiers if required. They focus on monitoring dashboards and identifying false positives.

A Security Operations Center (SOC) primarily exists to:

Develop new software applications

Monitor, detect, and respond to security threats

Manage corporate finance systems

Perform marketing analytics

Correct Answer: B

A SOC focuses on continuous monitoring, threat detection, and incident response to protect organizational assets. It acts as the central hub for security operations and response activities.