🔥 40% Off Crucial Exams Memberships — This Week Only

2 days, 11 hours remaining!
Crucial Exams

ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

A security analyst is investigating a possible slow-moving data exfiltration that may have taken place during the last four weeks. All firewall, proxy, and DLP events are collected in the organization's SIEM with timestamps normalized to UTC. To quickly highlight periods of abnormal outbound byte volume across days and hours-and still allow drill-down into specific time windows-which type of visualization will best support the analyst's timeline analysis?

  • A scatter plot showing source IP addresses on the X-axis and destination ports on the Y-axis for all outbound flows.

  • A heat map that plots outbound byte counts with days on one axis and hours of the day on the other, using color intensity to indicate volume.

  • A treemap that groups events by protocol inside rectangles sized by source subnet traffic volume.

  • A pie chart summarizing the proportion of outbound traffic sent to each destination country during the four-week period.

ISC2 Systems Security Certified Practitioner (SSCP)
Risk Identification, Monitoring and Analysis
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot