Refer to the exhibit.

According to the Wireshark output, what is the Indicator of Attack?

• A.There is no suspicious activity because this behavior is considered normal.
• B.207.86.6.174 requests different types of records from the 205.94.14.222 DNS server.
• C.207.86.6.174 requests DNS records for malicious domains.
• D.207.86.6.174 sends many DNS requests in a short period of time.

Comment: *

Name: *

Email: *

Verification: *

What is the purpose of YARA rules in malware analysis and now do the rules atd in identifying, classifying, and documenting malware?

• A.They use specific static patterns and attributes to identify and classify matware, characterizing its nature
• B.They automatically remove malware from an infected system while documenting the behavior of the APT
• C.They create a backup of identified malware and classify it according to its origin and source
• D.They encrypt identified malware on a system to prevent execution of files with the same classification

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

A security analyst is reviewing alerts from the SIEM system that was just implemented and notices a possible indication of an attack because the SSHD system just went live and there should be nobody using it. Which action should the analyst take to respond to the alert?

• A.Investigate the alert by checking SSH logs and correlating with other relevant data in SIEM.
• B.Reset the admin password in SSHD to prevent unauthorized access to the system at scale.
• C.Ignore the alert and continue monitoring for further activity because the system was just implemented.
• D.Immediately block the IP address 192.168.1.100 from accessing the SSHD environment.

Comment: *

Name: *

Email: *

Verification: *

Which tool is used for reverse engineering malware?

• A.Ghidra
• B.SNORT
• C.Wireshark
• D.NMAP

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

According to the SNORT alert, what is the attacker performing?

• A.brute-force attack against the web application user accounts
• B.XSS attack against the target webserver
• C.brute-force attack against directories and files on the target webserver
• D.SQL injection attack against the target webserver

Comment: *

Name: *

Email: *

Verification: *