CCDL2 Practice Questions - Certified CyberDefender Level 2 (CCDL2, formerly CCD) Exam - CCDL2 Practice Questions - Certified CyberDefender Level 2 (CCDL2, formerly CCD) Exam

Question 1

In a SOC environment, a Tier 1 analyst receives an alert for a suspicious outbound connection on port 443 to an unknown IP. After verifying the IP is flagged as malicious in threat intelligence feeds, what is the MOST appropriate immediate next step?

Escalate to Tier 2/3 with full context, preserve evidence, and initiate the incident response process Block the IP at the firewall and close the alert as resolved Notify the end user and ask them to restart their machine Wait 24 hours to gather more alerts before taking action

Correct Answer:

Escalate to Tier 2/3 with full context, preserve evidence, and initiate the incident response process

Question 2

Which NIST SP 800-61 incident response phase focuses on stopping an attacker's foothold from spreading to additional systems?

Containment Detection and Analysis Eradication Post-Incident Activity

Correct Answer:

Containment

Question 3

A threat hunter analyzing Elastic SIEM logs wants to identify processes that spawned cmd.exe from a browser process (e.g., chrome.exe). Which KQL query pattern correctly targets this parent-child relationship?

process.name: cmd.exe AND process.parent.name: chrome.exe process.name: cmd.exe AND event.type: start event.category: process AND process.executable: *cmd* winlog.event_id: 4688 AND process.name: chrome.exe

Correct Answer:

process.name: cmd.exe AND process.parent.name: chrome.exe

Question 4

During memory forensics with Volatility 3, which plugin is used to list all active network connections and listening sockets on a Windows memory image?

windows.netscan windows.pslist windows.cmdline windows.dlllist

Correct Answer:

windows.netscan

Question 5

An investigator examining a Windows disk image finds the file path C:\Users\victim\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations. What forensic artifact type is stored here?

Windows Jump Lists (custom destinations) Browser history cookies Windows prefetch files Registry hive transaction logs

Correct Answer:

Windows Jump Lists (custom destinations)

Exam overview

About this Exam

Prepare with the CCDL2 Practice Questions - Certified CyberDefender Level 2 (CCDL2, formerly CCD) Exam practice quiz. This question bank includes 100 questions covering windows, analyst, threat, elastic, and siem. Use it to review important concepts, identify knowledge gaps, and build confidence for the related exam, course, or assessment.

More details

Additional Information

CCDL2 Practice Questions - Certified CyberDefender Level 2 (CCDL2, formerly CCD) Exam

This practice set contains 100 questions from the matching question bank and focuses on windows, analyst, threat, elastic, and siem. Work through each question carefully, review the provided solutions, and revisit topics that need more study before your next attempt.

This is an independent study resource intended for practice and review; it is not an official examination or an endorsement by any organization named in the title.

Quiz information

Frequently Asked Questions

The complete question count is available after full access is unlocked.

No fixed duration is currently configured for this quiz.

Question explanations are included where they are available in the quiz content, helping you review the reasoning after answering.

Yes. You can retake the practice test again as you continue studying during your available access period.

After your access is confirmed, you can continue into the complete practice exam from this quiz flow.

Unless explicitly stated otherwise, this page provides independent practice material for study and exam preparation and is not the official examination itself.

Correct Answer:

Correct Answer:

Correct Answer:

Correct Answer:

Correct Answer:

About this Exam

Additional Information

CCDL2 Practice Questions - Certified CyberDefender Level 2 (CCDL2, formerly CCD) Exam

Frequently Asked Questions

Related Questions

ISC2 Certified in Cybersecurity Practice Exam

3F5X1 Admin 5-Level Practice Exam

Arizona CNA Certified Nursing Assistant Practice Exam

68W LPC Level 2 Practice Exam

Certified Professional Public Buyer (CPPB) Practice Exam

Pass Your A Level Biology Practice Exam