Certification911 problems· 26 reviewed

CompTIA Security+

911 incident response problems that help with CompTIA Security+ prep.

All problems (911)

SECURITY-1595A browser isolation profile is updated and one archive still bypassesOne archive type still bypasses inspection after browser isolation updates.SecurityAdvanced9 minPro SECURITY-1578A CrowdSec bouncer endpoint changes and one node still quarantines through the old API URLOne node still quarantines through the old CrowdSec API URL after migration.SecurityAdvanced9 minPro SECURITY-1593A WAF exception cleanup is correct and one hostname still skips inspectionOne hostname still skips inspection after WAF exception cleanup.SecurityAdvanced9 minPro SECURITY-1603A WAF rule action is fixed and one path still blocks good trafficOne path still blocks good traffic after a WAF rule fix.SecurityAdvanced9 minPro SECURITY-1601An Elastic detection fix is correct and one rule still misclassifies eventsOne Elastic rule still misclassifies events after a detection fix.SecurityAdvanced9 minPro SECURITY-1591An Elastic pipeline correction lands and one alert stream still missesOne alert stream still misses after an Elastic pipeline correction.SecurityAdvanced9 minPro SECURITY-1581An Elastic pipeline fix lands and one rule still missesOne detection rule still misses after an Elastic pipeline fix.SecurityAdvanced9 minPro SECURITY-1607An OpenSearch alerting fix is correct and one workflow still matches the old indexOne workflow still matches the old index after an OpenSearch alert fix.SecurityAdvanced9 minPro SECURITY-1597An OpenSearch restore policy is corrected and one index still republishesOne index still republishes after an OpenSearch restore policy correction.SecurityAdvanced9 minPro SECURITY-1565A browser isolation profile updates and one document type still downloads directOne document type still downloads direct after isolation profile updates.SecurityAdvanced10 minPro SECURITY-1563A managed WAF exception is removed and one hostname still skips inspectionOne hostname still skips WAF inspection after managed rules cleanup.SecurityAdvanced10 minPro SECURITY-1580A SPIFFE bundle rotates and one sidecar still trusts the old domainOne sidecar still trusts the old SPIFFE domain after bundle rotation.SecurityAdvanced10 minPro SECURITY-1590A SPIFFE bundle rotates and one sidecar still trusts the old domainOne sidecar still trusts the old domain after SPIFFE rotation.SecurityAdvanced10 minPro SECURITY-1600A SPIFFE trust bundle rotates and one sidecar still trusts the old domainOne sidecar still trusts the old domain after SPIFFE bundle rotation.SecurityAdvanced10 minPro SECURITY-1610A SPIFFE trust update is correct and one workload still rejects mTLSOne workload still rejects mTLS after a SPIFFE trust update.SecurityAdvanced10 minPro SECURITY-1573A WAF allowlist is cleaned up and one path still trusts the old CIDROne path still trusts the old CIDR after WAF allowlist cleanup.SecurityAdvanced10 minPro SECURITY-1583A WAF exception is removed and one host still bypasses inspectionOne hostname still bypasses inspection after WAF exception cleanup.SecurityAdvanced10 minPro SECURITY-1571An Elastic ingest pipeline is updated and one alert stream still missesOne alert stream misses detections after ingest pipeline updates.SecurityAdvanced10 minPro SECURITY-1577An OpenSearch repository becomes read-only and one restore still mutates stateOne restore still mutates repository state after it is marked read-only.SecurityAdvanced10 minPro SECURITY-1587An OpenSearch snapshot policy is corrected and one restore still republishes the old aliasOne restore still republishes the old alias after snapshot policy cleanup.SecurityAdvanced10 minPro