Mod 8 · Les 5/5
In progress
Module 8•Lesson 5 of 5•⏱️ 10 min read•Beginner+40 XP
Quiz — Detection
APPLY: Event IDs, ATT&CK mapping, honeytokens; purple detection on $LAB_AD.
Quiz — Detection• Audio Walkthrough
00:00/00:43
Detection literacy judgment.
Name events and map techniques — detect on lab AD, refuse stranger abuse.
Practice QuizQuestion 1
Multiple choiceQ1
Event 4769 indicates:
Practice QuizQuestion 2
True or FalseQ2
True or False: 4662 can relate to replication abuse detection.
Practice QuizQuestion 3
Multiple choiceQ3
Kerberoasting ATT&CK ID:
Practice QuizQuestion 4
Multiple choiceQ4
DCSync maps to:
Practice QuizQuestion 5
True or FalseQ5
True or False: Honeytokens on stranger systems are lab.
Practice QuizQuestion 6
Multiple choiceQ6
Honeytoken alert expects:
Practice QuizQuestion 7
Multiple choiceQ7
Detection lab scope:
Practice QuizQuestion 8
True or FalseQ8
True or False: ATT&CK map authorizes stranger attacks.
Practice QuizQuestion 9
Multiple choiceQ9
Purple team goal:
Practice QuizQuestion 10
Multiple choiceQ10
Next:
Answer 10 practice quiz questions to unlock XP reward. (0/10 answered)
Skip quiz & read next →