NEW QUESTION 39
A type of threat intelligent that find out the information about the attacker by misleading them is known as
.

NEW QUESTION 40
Identify the attack, where an attacker tries to discover all the possible information about a target network before launching a further attack.

NEW QUESTION 41
Mike is an incident handler for PNP Infosystems Inc. One day, there was a ticket raised regarding a critical incident and Mike was assigned to handle the incident. During the process of incident handling, at one stage, he has performed incident analysis and validation to check whether the incident is a true incident or a false positive.
Identify the stage in which he is currently in.

NEW QUESTION 42
Ray is a SOC analyst in a company named Queens Tech. One Day, Queens Tech is affected by a DoS/DDoS attack. For the containment of this incident, Ray and his team are trying to provide additional bandwidth to the network devices and increasing the capacity of the servers.
What is Ray and his team doing?

NEW QUESTION 43
An attacker, in an attempt to exploit the vulnerability in the dynamically generated welcome page, inserted code at the end of the company’s URL as follows:
http://technosoft.com.com/<script>alert(“WARNING: The application has encountered an error”);</script>.
Identify the attack demonstrated in the above scenario.

NEW QUESTION 44
According to the Risk Matrix table, what will be the risk level when the probability of an attack is very high, and the impact of that attack is major?
NOTE: It is mandatory to answer the question before proceeding to the next one.

NEW QUESTION 45
Which attack works like a dictionary attack, but adds some numbers and symbols to the words from the dictionary and tries to crack the password?

NEW QUESTION 46
Which of the following is a Threat Intelligence Platform?

NEW QUESTION 47
Daniel is a member of an IRT, which was started recently in a company named Mesh Tech. He wanted to find the purpose and scope of the planned incident response capabilities.
What is he looking for?

NEW QUESTION 48
Identify the attack when an attacker by several trial and error can read the contents of a password file present in the restricted etc folder just by manipulating the URL in the browser as shown:
http://www.terabytes.com/process.php./../../../../etc/passwd

NEW QUESTION 49
The threat intelligence, which will help you, understand adversary intent and make informed decision to ensure appropriate security in alignment with risk.
What kind of threat intelligence described above?

NEW QUESTION 50
Jason, a SOC Analyst with Maximus Tech, was investigating Cisco ASA Firewall logs and came across the following log entry:
May 06 2018 21:27:27 asa 1: %ASA -5 – 11008: User ‘enable_15’ executed the ‘configure term’ command What does the security level in the above log indicates?

NEW QUESTION 51
Which of the following threat intelligence is used by a SIEM for supplying the analysts with context and
“situational awareness” by using threat actor TTPs, malware campaigns, tools used by threat actors.
1.Strategic threat intelligence
2.Tactical threat intelligence
3.Operational threat intelligence
4.Technical threat intelligence

NEW QUESTION 52
Which of the following attack can be eradicated by using a safe API to avoid the use of the interpreter entirely?

NEW QUESTION 53
Identify the type of attack, an attacker is attempting on www.example.com website.

NEW QUESTION 54
Jony, a security analyst, while monitoring IIS logs, identified events shown in the figure below.

What does this event log indicate?

NEW QUESTION 55
Which encoding replaces unusual ASCII characters with “%” followed by the character’s two-digit ASCII code expressed in hexadecimal?