QuestionQ10

Proactive Threat Detection

A newly hired SOC analyst joins a fast-growing multinational organization that operates a vast IT infrastructure across multiple regions. The analyst’s first task is to rapidly evaluate the company’s external exposure and identify possible security risks before threat actors exploit them.

To begin the assessment, the analyst considers several techniques, including analyzing publicly available information, scanning for exposed services, reviewing DNS records, and collecting intelligence from external sources. However, because of the sheer data volume across multiple subsidiaries, cloud environments, and third-party integrations, the analyst soon realizes that some methods may not scale effectively for large, complex infrastructures and could cause delays or incomplete insights. Which technique is less practical for handling large or diverse data sets in this scenario?

  • A OSINT
  • B DNS Lookup
  • C Web Enumeration
  • D Stack Counting
Explanation

Stack counting is a manual, inventory-oriented approach and does not efficiently aggregate or correlate the broad, changing external information associated with many subsidiaries, cloud environments, and third-party integrations. OSINT, DNS lookups, and web enumeration are reconnaissance methods that can be automated and applied across external assets at scale.

Community Discussion

No comments yet. Be the first to start the discussion!