Which two elements are used for profiling a network? (Choose two.)

• A.session duration
• B.total throughput
• C.running processes
• D.listening ports
• E.OS fingerprint

Comment: *

Name: *

Email: *

Verification: *

Which incidence response step includes identifying all hosts affected by an attack?

• A.detection and analysis
• B.post-incident activity
• C.preparation
• D.containment, eradication, and recovery

Comment: *

Name: *

Email: *

Verification: *

A user received a malicious attachment but did not run it.
Which category classifies the intrusion?

• A.weaponization
• B.reconnaissance
• C.installation
• D.delivery

Comment: *

Name: *

Email: *

Verification: *

When communicating via TLS, the client initiates the handshake to the server and the server responds back with its certificate for identification.
Which information is available on the server certificate?

• A.trusted subordinate CA, public key, and cipher suites
• B.server name, trusted CA, and public key
• C.trusted CA name, cipher suites, and private key
• D.server name, trusted subordinate CA, and private key

Comment: *

Name: *

Email: *

Verification: *

What is a difference between inline traffic interrogation and traffic mirroring?

• A.Traffic mirroring passes live traffic to a tool for blocking
• B.Traffic mirroring inspects live traffic for analysis and mitigation
• C.Inline traffic copies packets for analysis and security
• D.Inline inspection acts on the original traffic data flow

Comment: *

Name: *

Email: *

Verification: *