SOC Analysts quiz

More questions about SOC Analysts

These visible examples show the question style. LearnClash turns the full topic into ranked duels and spaced repetition.

1. 1 Easy

   Why do security analysts isolate an infected computer from the network?

   Answer: To stop malware spreading to other machines

   Why: Network isolation severs lateral communication paths while keeping endpoint management open so analysts can collect live memory.

2. 2 Medium

   Which default TCP port does Remote Desktop Protocol use?

   Answer: 3389

   Why: Attackers scan the internet for open port 3389, so exposed RDP is one of the most common ways ransomware gets in.

3. 3 Hard

   Which port does WinRM use for unencrypted HTTP management?

   Answer: 5985

   Why: While port 5985 handles standard HTTP WinRM traffic, secure HTTPS management sessions run over port 5986.

4. 4 Easy

   Who legally tests computer networks to find security flaws?

   Answer: Ethical hacker

   Why: Ethical hackers conduct authorized penetration tests under explicit contracts to avoid violating computer crime laws.

5. 5 Medium

   Which file format stores raw network packet captures?

   Answer: PCAP

   Why: PCAP files store the exact byte stream of recorded network conversations for post-incident inspection in tools like Wireshark.

6. 6 Hard

   What algorithm do botnets use to generate random domain names?

   Answer: DGA

   Why: DGAs use predictable seeds like the current date to ensure infected hosts and command servers always generate identical domain lists.