NEW QUESTION 27
While planning a vulnerability assessment on a computer network, which of the following is essential? (Choose two.)

NEW QUESTION 28
A security analyst is required to collect detailed network traffic on a virtual machine. Which of the following tools could the analyst use?

NEW QUESTION 29
A security operations center (SOC) analyst observed an unusually high number of login failures on a particular database server. The analyst wants to gather supporting evidence before escalating the observation to management. Which of the following expressions will provide login failure data for 11/24/2015?

NEW QUESTION 30
Which of the following are legally compliant forensics applications that will detect an alternative data stream (ADS) or a file with an incorrect file extension? (Choose two.)

NEW QUESTION 31
Which of the following, when exposed together, constitutes PII? (Choose two.)

NEW QUESTION 32
Which of the following enables security personnel to have the BEST security incident recovery practices?

NEW QUESTION 33
The Key Reinstallation Attack (KRACK) vulnerability is specific to which types of devices? (Choose two.)

NEW QUESTION 34
An attacker intercepts a hash and compares it to pre-computed hashes to crack a password. Which of the following methods has been used?

NEW QUESTION 35
A web server is under a denial of service (DoS) attack. The administrator reviews logs and creates an access control list (ACL) to stop the attack. Which of the following technologies could perform these steps automatically in the future?

NEW QUESTION 36
A Windows system administrator has received notification from a security analyst regarding new malware that executes under the process name of “armageddon.exe” along with a request to audit all department workstations for its presence. In the absence of GUI-based tools, what command could the administrator execute to complete this task?

NEW QUESTION 37
A security administrator needs to review events from different systems located worldwide. Which of the following is MOST important to ensure that logs can be effectively correlated?

NEW QUESTION 38
After successfully enumerating the target, the hacker determines that the victim is using a firewall. Which of the following techniques would allow the hacker to bypass the intrusion prevention system (IPS)?

NEW QUESTION 39
Which of the following is a method of reconnaissance in which a ping is sent to a target with the expectation of receiving a response?

NEW QUESTION 40
If a hacker is attempting to alter or delete system audit logs, in which of the following attack phases is the hacker involved?

NEW QUESTION 41
In which of the following attack phases would an attacker use Shodan?

NEW QUESTION 42
A security administrator notices a process running on their local workstation called SvrsScEsdKexzCv.exe.
The unknown process is MOST likely:

NEW QUESTION 43
According to Payment Card Industry Data Security Standard (PCI DSS) compliance requirements, an organization must retain logs for what length of time?

NEW QUESTION 44
Which of the following are part of the hardening phase of the vulnerability assessment process? (Choose two.)

NEW QUESTION 45
Various logs are collected for a data leakage case to make a forensic analysis. Which of the following are MOST important for log integrity? (Choose two.)

NEW QUESTION 46
Which of the following would MOST likely make a Windows workstation on a corporate network vulnerable to remote exploitation?

NEW QUESTION 47
The incident response team has completed root cause analysis for an incident. Which of the following actions should be taken in the next phase of the incident response process? (Choose two.)

NEW QUESTION 48
Recently, a cybersecurity research lab discovered that there is a hacking group focused on hacking into the computers of financial executives in Company A to sell the exfiltrated information to Company B.
Which of the
following threat motives does this MOST likely represent?

NEW QUESTION 49
During which phase of a vulnerability assessment would a security consultant need to document a requirement to retain a legacy device that is no longer supported and cannot be taken offline?

NEW QUESTION 50
An organization recently suffered a data breach involving a server that had Transmission Control Protocol (TCP) port 1433 inadvertently exposed to the Internet. Which of the following services was vulnerable?