Defensive network analysis
Use synthetic firewall, intrusion-detection and host logs to investigate a suspicious connection. State your hypothesis, correlate the evidence and write a short mitigation recommendation.
The Computer Network Defense Analyst role combines evidence from multiple log sources to identify vulnerabilities, respond to cyber events and develop mitigations.
Source posting