Mod 6 · Les 5/5
In progress
Module 6•Lesson 5 of 5•⏱️ 10 min read•Beginner+39 XP
Quiz — Triage
APPLY: triage process, FP vs TP, enrichment; $SOC_LAB sample alerts only.
Quiz — Triage• Audio Walkthrough
00:00/00:43
Alert triage judgment.
Name triage workflow and dispositions — refuse unauthorized SIEM and attack-generated alerts.
Practice QuizQuestion 1
Multiple choiceQ1
Triage literacy uses:
Practice QuizQuestion 2
True or FalseQ2
True or False: Querying stranger SIEM without authorization is lab.
Practice QuizQuestion 3
Multiple choiceQ3
Triage process includes:
Practice QuizQuestion 4
Multiple choiceQ4
FP-Benign means:
Practice QuizQuestion 5
True or FalseQ5
True or False: Running attacks to get TP alerts is lab.
Practice QuizQuestion 6
Multiple choiceQ6
Enrichment layers include:
Practice QuizQuestion 7
Multiple choiceQ7
TP disposition requires:
Practice QuizQuestion 8
True or FalseQ8
True or False: IOC scanning of stranger infra is enrichment lab.
Practice QuizQuestion 9
Multiple choiceQ9
FP-Tuning indicates:
Practice QuizQuestion 10
Multiple choiceQ10
Next:
Answer 10 practice quiz questions to unlock XP reward. (0/10 answered)
Skip quiz & read next →