NO.65 An analyst is investigating a host in the network that appears to be communicating to a command and control server on the Internet. After collecting this packet capture the analyst cannot determine the technique and payload used for the communication.

Which obfuscation technique is the attacker using?

NO.66 An engineer needs to discover alive hosts within the 192.168.1.0/24 range without triggering intrusive portscan alerts on the IDS device using Nmap. Which command will accomplish this goal?

NO.67 Refer to the exhibit.

Which type of log is displayed?

NO.68 Which piece of information is needed for attribution in an investigation?

NO.69 Which evasion technique is a function of ransomware?

NO.70

Refer to the exhibit. What is the potential threat identified in this Stealthwatch dashboard?

NO.71 An analyst discovers that a legitimate security alert has been dismissed. Which signature caused this impact on network traffic?

NO.72 Drag and drop the uses on the left onto the type of security system on the right.

NO.73 Why is encryption challenging to security monitoring?

NO.74 Refer to the exhibit.

Which two elements in the table are parts of the 5-tuple? (Choose two.)

NO.75 Refer to the exhibit.

Which application protocol is in this PCAP file?

NO.76 How does TOR alter data content during transit?

NO.77

An analyst is investigating a host in the network that appears to be communicating to a command and control server on the Internet. After collecting this packet capture the analyst cannot determine the technique and payload used for the communication.
Which obfuscation technique is the attacker using?

NO.78 What is an example of social engineering attacks?

NO.79 What describes the defense-m-depth principle?

NO.80 Refer to the exhibit.

Which technology generates this log?