10/10
Parallel Enrichment is available on Metron by default
false - veri
Threat Stellar supports Regular Expressions.
true - veri
What is the order of stages in Stream Processing Pipeline. a) Theat Intel b.)
Telemetry Parsing c.) Index and Write d.) Alert Triage e.) Enrichment
b, e, a, d, c - veri
PCAP data can be captured using Metron module __________
DPDK - veri
Which of the following is NOT a component of parsing topology?
m
Storm parser spout - veri
er as
co
Stellar is a ___________
eH w
domain - veri
o.
rs e
Enrichment configuration can be stored on _________
ou urc
zookeper - veri
In Telemetry Parsing Stage ________
data normalization takes place - veri
o
aC s
v i y re
Metron Stream Processing is built on top of
apache storm - verify
Enrichment configuration can be stored on _________
ed d
Telemetry zookeeper - verify
ar stu
++++++++++++++
10/10
sh is
Apache Metron is built on top of _________
apache opensource - veri
Th
Metron Provides support for multiple types of data through its __________
Pluggable framework -veri
Telemetry Data Ingestion is possible into Metron through ___________
nifi -veri
Timestamp in Metron is parsed in ________
posix -veri
Apache Metron in Deployment is __________
centralised - veri
Machine Learning models can be adopted in Metron for ________
This study source was downloaded by 100000829495756 from CourseHero.com on 11-07-2021 18:30:59 GMT -06:00
https://www.coursehero.com/file/86566599/Security-Analytics-with-Apache-Metrontxttxt/
all the given options - veri
Which of the following is an Example of Threat Intel feeds in Metron?
soltra -veri
Consider you are a store owner operating your own website for the people of your
Town. What can be ideal for maintaining security of the shopping platform on
your site?
Traditional SIEM -veri
Who is responsible for finding patterns in the security data ingested into
Metron?
Security Data Scientist - veri
Metron Data Capture supports the protocols such as
ALL -veri
31. Who is responsible for finding patterns in the security data ingested into
m
Metron? Security Data Scientist
er as
26. Consider you are a store owner operating your own website for the people of
co
your Town. What can be ideal for maintaining security of the shopping platform
eH w
on your site? Traditional SIEM
18. Apache Metron in Deployment is _ centralized
o.
30. Timestamp in Metron is parsed in POSIX
rs e
32. Telemetry Data Ingestion is possible into Metron through _ Apache nifi
ou urc
33. Metron Data Capture supports the protocols such as - ALL
34. Machine Learning models can be adopted in Metron for ________ ALL
35. Which of the following is an Example of Threat Intel feeds in Metron? Soltra
36. Apache Metron is built on top of _Apache Open Source Technologies
o
32. PCAP data can be captured using Metron module -DPDK
aC s
33. Stellar supports Regular Expressions. true
v i y re
6. In Telemetry Parsing Stage _ Data normalization take place
31. What is the order of stages in Stream Processing Pipeline. a) Theat Intel
b.) Telemetry Parsing c.) Index and Write d.) Alert Triage e.) Enrichment
beadc
30.Parallel Enrichment is available on Metron by default- False
ed d
31. stellar Expressions can be used in telemetry parsing as part of ______cannot
ar stu
be used in telemetry parsing - v
32. Stellar is a _ Domain specfici lan
14. Which of the following is NOT a component of parsing topology? Storm parse
sprout
15. Metron Stream Processing is built on top of - Apache storm
sh is
16. Client for MaaS is written in _ python
17. Select the Correct order of nested data in a JSON file which is processed in
Th
the pipeline. Enrichment->ThreatINtel->triageconfig
33. Threat Intel Feeds can be _All
31. Client for MaaS is written in _Java
21. Risk Level is determined through_ RiskLevelRUles
30. Hail a Taxi is _External Stix Feed
9. Identify the Stellar Function which is NOT VALID. IS_SUBNET
2. Pick out the Stellar Keyword among the following. Nan
19. Zeppelin Interpreter do NOT support - Node.js
32. ElasticSearch uses _ Kibana indexing
33. Profiler can be configured for entities like - all
35. Solr and ElasticSearch Indices are supported _as they are Random indices
34. Identify Threat Intel Storages - Hbase
1. UDFs are supported by Stellar - true
3. Validation of data entering Metron can be validated _ Partially at the time
of ingestion
This study source was downloaded by 100000829495756 from CourseHero.com on 11-07-2021 18:30:59 GMT -06:00
https://www.coursehero.com/file/86566599/Security-Analytics-with-Apache-Metrontxttxt/
4. Default Indexer of Metron is _ HDFS
5. What happens when a specific no.of entries are not populated in batchTimeout
specified? Entries are refreshed to wait for another batchTimeout
7. DPI(Deep Packet Inspection) Data is best to be extracted only for _ PCAP
8. When Machine Learning models are employed for threat intelligence what is
considered to be an infrastructure challenge? ALL
10. How does Network Intrusion Detection System works? Tracks communication
11. Soltra is a _ Threat intel Feed aggregator(y)
12. Threat Intel Store is based on _ DocumentDB
13. Metron apart from in-built Geo Enrichment supports - Asset and network
enrichment
15. Stellar is Integrated into Metron Components such as _ Global validation and
threat triage(y)
16. MaaS scaling can be done through _ Storm
20. HDFS Index updates are supported in Metron.Yes using a NOSQL write ahead
log(y)
22. Which of the following statements regarding MetaalertDao is/are TRUE - All
23. Apache Metron do NOT have a dependency on _Vagrant
24. Who among the following is considered to be an advanced SME w.r.t Apache
Metron Platform - SOC investigator
25. Data to create a profiler is collected _ over Multiple windows
27. What are the feeds in Metron? All
m
28. Consider you are trying to parse telemetry of a application which uses a
er as
custom API. Its telemetry is highly complex and the data is generated at a rapid
co
rate. What is an ideal parsing strategy for the scenario? -Write a Custom JVM
eH w
parser while using Grok as stop gap
29. Enrichment configuration can be stored on _ Zookeper(y)
o.
rs e
ou urc
o
aC s
v i y re
ed d
ar stu
sh is
Th
This study source was downloaded by 100000829495756 from CourseHero.com on 11-07-2021 18:30:59 GMT -06:00
https://www.coursehero.com/file/86566599/Security-Analytics-with-Apache-Metrontxttxt/
Powered by TCPDF (www.tcpdf.org)
