NEW QUESTION 61
The threat intelligence, which will help you, understand adversary intent and make informed decision to ensure appropriate security in alignment with risk.
What kind of threat intelligence described above?

NEW QUESTION 62
According to the Risk Matrix table, what will be the risk level when the probability of an attack is very low and the impact of that attack is major?

NEW QUESTION 63
In which phase of Lockheed Martin’s – Cyber Kill Chain Methodology, adversary creates a deliverable malicious payload using an exploit and a backdoor?

NEW QUESTION 64
Identify the type of attack, an attacker is attempting on www.example.com website.

NEW QUESTION 65
Which of the following factors determine the choice of SIEM architecture?

NEW QUESTION 66
What does HTTPS Status code 403 represents?

NEW QUESTION 67
David is a SOC analyst in Karen Tech. One day an attack is initiated by the intruders but David was not able to find any suspicious events.
This type of incident is categorized into?

NEW QUESTION 68
Emmanuel is working as a SOC analyst in a company named Tobey Tech. The manager of Tobey Tech recently recruited an Incident Response Team (IRT) for his company. In the process of collaboration with the IRT, Emmanuel just escalated an incident to the IRT.
What is the first step that the IRT will do to the incident escalated by Emmanuel?

NEW QUESTION 69
Which of the following event detection techniques uses User and Entity Behavior Analytics (UEBA)?

NEW QUESTION 70
Which of the following framework describes the essential characteristics of an organization’s security engineering process that must exist to ensure good security engineering?

NEW QUESTION 71
John, a threat analyst at GreenTech Solutions, wants to gather information about specific threats against the organization. He started collecting information from various sources, such as humans, social media, chat room, and so on, and created a report that contains malicious activity.
Which of the following types of threat intelligence did he use?

NEW QUESTION 72
Banter is a threat analyst in Christine Group of Industries. As a part of the job, he is currently formatting and structuring the raw data.
He is at which stage of the threat intelligence life cycle?

NEW QUESTION 73
Which of the following Windows Event Id will help you monitors file sharing across the network?

NEW QUESTION 74
Mike is an incident handler for PNP Infosystems Inc. One day, there was a ticket raised regarding a critical incident and Mike was assigned to handle the incident. During the process of incident handling, at one stage, he has performed incident analysis and validation to check whether the incident is a true incident or a false positive.
Identify the stage in which he is currently in.

NEW QUESTION 75
Identify the HTTP status codes that represents the server error.

NEW QUESTION 76
Identify the attack in which the attacker exploits a target system through publicly known but still unpatched vulnerabilities.

NEW QUESTION 77
Which of the following attack can be eradicated by disabling of “allow_url_fopen and allow_url_include” in the php.ini file?

NEW QUESTION 78
Which of the following attack can be eradicated by using a safe API to avoid the use of the interpreter entirely?

NEW QUESTION 79
Which of the following threat intelligence helps cyber security professionals such as security operations managers, network operations center and incident responders to understand how the adversaries are expected to perform the attack on the organization, and the technical capabilities and goals of the attackers along with the attack vectors?

NEW QUESTION 80
The Syslog message severity levels are labelled from level 0 to level 7.
What does level 0 indicate?

NEW QUESTION 81
John, a SOC analyst, while monitoring and analyzing Apache web server logs, identified an event log matching Regex /(.|(%|%25)2E)(.|(%|%25)2E)(/|(%|%25)2F|\|(%|%25)5C)/i.
What does this event log indicate?

NEW QUESTION 82
What does the HTTP status codes 1XX represents?