Active › Module 8 › Lesson 5
Quiz — Detection
APPLY: Event IDs, ATT&CK mapping, honeytokens; purple detection on $LAB_AD.
Opening
Detection literacy judgment.
Name events and map techniques — detect on lab AD, refuse stranger abuse.
Knowledge Check
Event 4769 indicates:
Multiple choice
Knowledge Check
True or False: 4662 can relate to replication abuse detection.
True or False
Knowledge Check
Kerberoasting ATT&CK ID:
Multiple choice
Knowledge Check
DCSync maps to:
Multiple choice
Knowledge Check
True or False: Honeytokens on stranger systems are lab.
True or False
Knowledge Check
Honeytoken alert expects:
Multiple choice
Knowledge Check
Detection lab scope:
Multiple choice
Knowledge Check
True or False: ATT&CK map authorizes stranger attacks.
True or False
Knowledge Check
Purple team goal:
Multiple choice
Knowledge Check
Next:
Multiple choice
Answer all 10 knowledge checks to continue. (0/10 answered)