A security team received an alert of suspicious activity on a user's Internet browser. The user's anti-virus software indicated that the file attempted to create a fake recycle bin folder and connect to an external IP address. Which two actions should be taken by the security analyst with the executable file for further analysis? (Choose two.)

• A.Evaluate the process activity in Cisco Umbrella.
• B.Analyze the TCP/IP Streams in Cisco Secure Malware Analytics (Threat Grid).
• C.Evaluate the behavioral indicators in Cisco Secure Malware Analytics (Threat Grid).
• D.Analyze the Magic File type in Cisco Umbrella.
• E.Network Exit Localization in Cisco Secure Malware Analytics (Threat Grid).

Comment: *

Name: *

Email: *

Verification: *

A security team detected an above-average amount of inbound tcp/135 connection attempts from unidentified senders. The security team is responding based on their incident response playbook. Which two elements are part of the eradication phase for this incident? (Choose two.)

• A.anti-malware software
• B.data and workload isolation
• C.centralized user management
• D.intrusion prevention system
• E.enterprise block listing solution

Comment: *

Name: *

Email: *

Verification: *

What is a concern for gathering forensics evidence in public cloud environments?

• A.High Cost: Cloud service providers typically charge high fees for allowing cloud forensics.
• B.Configuration: Implementing security zones and proper network segmentation.
• C.Timeliness: Gathering forensics evidence from cloud service providers typically requires substantial time.
• D.Multitenancy: Evidence gathering must avoid exposure of data from other tenants.

Comment: *

Name: *

Email: *

Verification: *

An engineer must advise on how YARA rules can enhance detection capabilities. What can YARA rules be used to identify?

• A.suspicious web requests
• B.suspicious files that match specific conditions
• C.suspicious emails and possible phishing attempts
• D.network traffic patterns

Comment: *

Name: *

Email: *

Verification: *

Which magic byte indicates that an analyzed file is a pdf file?

• A.cGRmZmlsZQ
• B.706466666
• C.255044462d
• D.0a0ah4cg

Comment: *

Name: *

Email: *

Verification: *