最新なEC-COUNCIL 312-39問題集（202題）、真実試験の問題を全部にカバー！

質問 1：
Which of the following is a correct flow of the stages in an incident handling and response (IH&R) process?
A. Incident Triage -> Eradication -> Containment -> Incident Recording -> Preparation -> Recovery -> Post-Incident Activities
B. Incident Recording -> Preparation -> Containment -> Incident Triage -> Recovery -> Eradication -> Post-Incident Activities
C. Preparation -> Incident Recording -> Incident Triage -> Containment -> Eradication -> Recovery -> Post-Incident Activities
D. Containment -> Incident Recording -> Incident Triage -> Preparation -> Recovery -> Eradication -> Post-Incident Activities
正解：C
解説: (Pass4Test メンバーにのみ表示されます)

質問 2：
Jannet works in a multinational corporation that operates multiple data centers, cloud environments, and on- premises systems. As a SOC analyst, she notices that security incidents are taking too long to detect and investigate. After analyzing this, she discovers that logs from firewalls, endpoint security solutions, authentication servers, and cloud applications are scattered across different systems in various formats. Her team has to manually convert logs into a readable format before investigating incidents. What approach should she implement to accept logs from heterogeneous sources with different formats, convert them into a common format, and improve incident detection and response time?
A. Log collection
B. Log normalization
C. Log transformation
D. Log correlation
正解：B
解説: (Pass4Test メンバーにのみ表示されます)

質問 3：
A multinational cybersecurity firm wants to enhance its threat intelligence capabilities by integrating real-time threat feeds into Microsoft Sentinel. These feeds include malicious IPs, domains, file hashes, and attack patterns. The firm requires a standardized protocol that allows automated threat intelligence sharing so Sentinel continuously receives updated indicators from external sources in a structured format. Which Microsoft Sentinel data connector should be implemented to integrate threat intelligence feeds using an industry-standard protocol?
A. TAXII data connector
B. Syslog connector
C. Threat Intelligence Platforms data connector
D. Microsoft Defender for Cloud (Legacy) connector
正解：A
解説: (Pass4Test メンバーにのみ表示されます)

質問 4：
David is a SOC analyst responsible for monitoring critical infrastructure. He detects unauthorized applications running on a high-privilege Windows server accessible only by a restricted set of users. The applications were not part of approved deployments, and installations occurred outside business hours. Logs indicate potential system configuration changes around the same timeframe. Which log should he examine to determine when and how these installations occurred?
A. System event log
B. Security event log
C. Application event log
D. Setup event log
正解：D
解説: (Pass4Test メンバーにのみ表示されます)

質問 5：
The SOC team is tasked with enhancing the security of an organization's network infrastructure. The organization's public-facing web servers, which handle customer transactions, need to be isolated from the internal private network containing sensitive employee data and proprietary systems. The goal is to create a buffer zone that limits exposure of internal systems if the web servers are compromised during a cyberattack, such as a DDoS or SQL injection attempt. As a SOC analyst, which network architecture component would you recommend implementing to establish this isolated region?
A. Demilitarized Zone (DMZ)
B. Firewall
C. Intrusion Detection System (IDS)
D. Honeypot
正解：A
解説: (Pass4Test メンバーにのみ表示されます)

質問 6：
You are working in a Cybersecurity Operations Center for PayOnline, which handles payment gateways for multiple applications. Your team monitors logs across firewalls, authentication servers, and endpoint detection tools. The team currently relies on manual log reviews, but the volume of raw, unstructured logs makes the process inefficient and error-prone. During a recent incident, the team struggled to extract relevant details from disorganized logs, delaying detection and response. The team decides to implement an automated log parsing solution that can transform unstructured logs into a structured format. Which log parsing technique should you implement to improve log data structuring and enable efficient querying and analysis?
A. Semantic parsing
B. Grok filters
C. Key-value extraction
D. Delimited parsing
正解：B
解説: (Pass4Test メンバーにのみ表示されます)