311. A suspicious email contains an executable attachment. Which artifact is most useful for determining whether the same file appeared elsewhere?
Tags: Email
312. Which combination is most useful when investigating whether an email sender was spoofed?
Tags: Email
313. An EDR platform detects ransomware behavior and automatically terminates the malicious process. Which additional event is most useful for determining the effectiveness of the response?
314. An unknown scheduled task creates a PowerShell process every hour on a server. What is the most likely security concern?
315. Which endpoint event provides the most useful context for determining how a suspicious process was executed?
316. Why is process ancestry important during endpoint investigation?
317. Which event should generally receive the highest priority during a SOC investigation?
318. A Conditional Access policy blocks authentication from an unmanaged device. Which event would be most useful to determine whether the policy worked as intended?
319. An attacker has obtained a user's password but repeatedly fails MFA. Which additional event would be most important for investigation?
320. Which sign-in event is the strongest indicator of a possible credential-compromise attempt?
Browse atleast 50% to increase passing rate

Get In Touch

Frequently Asked Questions | Wikique

What People Say

Hear from people who have used our platform.

★★★★★

Wikique has become one of my go-to platforms for learning and improving my general knowledge. The questions are well organized, the explanations are easy to understand, and the variety of topics makes learning interesting. It’s a great resource for students, exam aspirants, and anyone who enjoys learning something new every day.

AS
Ajay Sharma
Student & Competitive Exam Aspirant
★★★★★

What I like most about Wikique is that I can practice questions from different topics in one place. It is a useful resource for learning, revision and self-assessment.

AK
Amit Kumar
IT Professional
★★★★★

Wikique makes learning more interactive. Instead of just reading about a topic, I can test my understanding through MCQs and quickly identify the areas where I need more practice.

NS
Neha Singh
Learner