QuestionQ10
Proactive Threat DetectionA newly hired SOC analyst joins a fast-growing multinational organization that operates a vast IT infrastructure across multiple regions. The analyst’s first task is to rapidly evaluate the company’s external exposure and identify possible security risks before threat actors exploit them.
To begin the assessment, the analyst considers several techniques, including analyzing publicly available information, scanning for exposed services, reviewing DNS records, and collecting intelligence from external sources. However, because of the sheer data volume across multiple subsidiaries, cloud environments, and third-party integrations, the analyst soon realizes that some methods may not scale effectively for large, complex infrastructures and could cause delays or incomplete insights. Which technique is less practical for handling large or diverse data sets in this scenario?
- A OSINT
- B DNS Lookup
- C Web Enumeration
- D Stack Counting
Community Discussion