Mod 5 · Les 5/5
In progress
Module 5•Lesson 5 of 5•⏱️ 10 min read•Beginner+39 XP
Quiz — Correlation
10 APPLY items on correlation, dashboards, and L2 tuning on $HUNT_LAB.
Quiz — Correlation• Audio Walkthrough
00:00/00:50
Correlation and Dashboards — Module Quiz
Ten APPLY items. Name correlation and dashboard concepts on YOUR $HUNT_LAB scenarios — never unauthorized prod deploy, stranger SIEM edits, or offensive playbooks. Original Cyberlium. Next: PICERL Named.
Practice QuizQuestion 1
Multiple choiceQ1
APPLY: Correlation joins sources by:
Practice QuizQuestion 2
True or FalseQ2
APPLY: True or False: UTC timestamps improve multi-source correlation.
Practice QuizQuestion 3
Multiple choiceQ3
APPLY: L2 hunt dashboards may include:
Practice QuizQuestion 4
Multiple choiceQ4
APPLY: Tutorial edits production rules without ticket — you:
Practice QuizQuestion 5
Multiple choiceQ5
APPLY: L2 tuning proposals should include:
Practice QuizQuestion 6
Multiple choiceQ6
APPLY: jq KPI from lab jsonl supports:
Practice QuizQuestion 7
Multiple choiceQ7
APPLY: Cyberlium NEVER allows:
Practice QuizQuestion 8
True or FalseQ8
APPLY: True or False: Multi-source correlation improves hunt narrative quality.
Practice QuizQuestion 9
Multiple choiceQ9
APPLY: chmod 600 on correlation notes means:
Practice QuizQuestion 10
Multiple choiceQ10
APPLY: Next lesson after this quiz:
Answer 10 practice quiz questions to unlock XP reward. (0/10 answered)
Skip quiz & read next →