QUESTION 41
Refer to the exhibit.

Which frame numbers contain a file that is extractable via TCP stream within Wireshark?

QUESTION 42
What is an example of social engineering attacks?

QUESTION 43
A SOC analyst is investigating an incident that involves a Linux system that is identifying specific sessions.
Which identifier tracks an active program?

QUESTION 44
What are the two differences between stateful and deep packet inspection? (Choose two )

QUESTION 45
Which security technology guarantees the integrity and authenticity of all messages transferred to and from a web application?

QUESTION 46
Refer to the exhibit.

What information is depicted?

QUESTION 47
What is an incident response plan?

QUESTION 48

Refer to the exhibit. What information is depicted?

QUESTION 49
Which signature impacts network traffic by causing legitimate traffic to be blocked?

QUESTION 50
What is the difference between the ACK flag and the RST flag in the NetFlow log session?

QUESTION 51
Refer to the exhibit.

What is the expected result when the “Allow subdissector to reassemble TCP streams” feature is enabled?

QUESTION 52
Drag and drop the security concept on the left onto the example of that concept on the right.

QUESTION 53
A security engineer deploys an enterprise-wide host/endpoint technology for all of the company’s corporate PCs. Management requests the engineer to block a selected set of applications on all PCs.
Which technology should be used to accomplish this task?

QUESTION 54
How does an attack surface differ from an attack vector?

QUESTION 55
Drag and drop the security concept on the left onto the example of that concept on the right.

QUESTION 56
Refer to the exhibit.

Which kind of attack method is depicted in this string?

QUESTION 57
What is a benefit of using asymmetric cryptography?

QUESTION 58
Refer to the exhibit.

What information is depicted?

QUESTION 59
A company encountered a breach on its web servers using IIS 7 5 Dunng the investigation, an engineer discovered that an attacker read and altered the data on a secure communication using TLS 1 2 and intercepted sensitive information by downgrading a connection to export-grade cryptography. The engineer must mitigate similar incidents in the future and ensure that clients and servers always negotiate with the most secure protocol versions and cryptographic parameters. Which action does the engineer recommend?

QUESTION 60
An engineer needs to fetch logs from a proxy server and generate actual events according to the data received.
Which technology should the engineer use to accomplish this task?

QUESTION 61
Drag and drop the access control models from the left onto the correct descriptions on the right.

QUESTION 62
An engineer received an alert affecting the degraded performance of a critical server. Analysis showed a heavy CPU and memory load. What is the next step the engineer should take to investigate this resource usage?

QUESTION 63
What is a difference between SOAR and SIEM?

QUESTION 64
What is the difference between a threat and an exploit?