NEW QUESTION 10
Which of the following is a set of standard guidelines for ongoing development, enhancement, storage, dissemination and implementation of security standards for account data protection?

NEW QUESTION 11
Which of the following event detection techniques uses User and Entity Behavior Analytics (UEBA)?

NEW QUESTION 12
Charline is working as an L2 SOC Analyst. One day, an L1 SOC Analyst escalated an incident to her for further investigation and confirmation. Charline, after a thorough investigation, confirmed the incident and assigned it with an initial priority.
What would be her next action according to the SOC workflow?

NEW QUESTION 13
Which of the following is a Threat Intelligence Platform?

NEW QUESTION 14
John, a SOC analyst, while monitoring and analyzing Apache web server logs, identified an event log matching Regex /(.|(%|%25)2E)(.|(%|%25)2E)(/|(%|%25)2F||(%|%25)5C)/i.
What does this event log indicate?

NEW QUESTION 15
Which of the following formula is used to calculate the EPS of the organization?

NEW QUESTION 16
An attacker, in an attempt to exploit the vulnerability in the dynamically generated welcome page, inserted code at the end of the company’s URL as follows:
http://technosoft.com.com/<script>alert(“WARNING: The application has encountered an error”);</script>.
Identify the attack demonstrated in the above scenario.

NEW QUESTION 17
An organization is implementing and deploying the SIEM with following capabilities.

What kind of SIEM deployment architecture the organization is planning to implement?

NEW QUESTION 18
Where will you find the reputation IP database, if you want to monitor traffic from known bad IP reputation using OSSIM SIEM?

NEW QUESTION 19
Which of the following process refers to the discarding of the packets at the routing level without informing the source that the data did not reach its intended recipient?

NEW QUESTION 20
Which of the following Windows Event Id will help you monitors file sharing across the network?

NEW QUESTION 21
Robin, a SOC engineer in a multinational company, is planning to implement a SIEM. He realized that his organization is capable of performing only Correlation, Analytics, Reporting, Retention, Alerting, and Visualization required for the SIEM implementation and has to take collection and aggregation services from a Managed Security Services Provider (MSSP).
What kind of SIEM is Robin planning to implement?

NEW QUESTION 22
A type of threat intelligent that find out the information about the attacker by misleading them is known as
.

NEW QUESTION 23
Which of the following is a correct flow of the stages in an incident handling and response (IH&R) process?

NEW QUESTION 24
According to the Risk Matrix table, what will be the risk level when the probability of an attack is very low and the impact of that attack is major?

NEW QUESTION 25
Which of the following attack can be eradicated by converting all non-alphanumeric characters to HTML character entities before displaying the user input in search engines and forums?

NEW QUESTION 26
Identify the HTTP status codes that represents the server error.