An engineer is analyzing a ticket for an unexpected server shutdown and discovers that the web-server ran out of useable memory and crashed.
Which data is needed for further investigation?

• A./var/log/access.log
• B./var/log/messages.log
• C./var/log/httpd/messages.log
• D./var/log/httpd/access.log

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

What do these artifacts indicate?

• A.An executable file is requesting an application download.
• B.A malicious file is redirecting users to different domains.
• C.The MD5 of a file is identified as a virus and is being blocked.
• D.A forged DNS request is forwarding users to malicious websites.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

What is the IOC threat and URL in this STIX JSON snippet?

• A.malware;
  'http://x4z9arb.cn/4712/'
• B.malware; x4z9arb backdoor
• C.x4z9arb backdoor;http://x4z9arb.cn/4712/
• D.malware; malware--162d917e-766f-4611-b5d6-652791454fca
• E.stix;
  'http://x4z9arb.cn/4712/'

Comment: *

Name: *

Email: *

Verification: *

What is the steganography anti-forensics technique?

• A.concealing malicious files in ordinary or unsuspecting places
• B.changing the file header of a malicious file to another file type
• C.hiding a section of a malicious file in unused areas of a file
• D.sending malicious files over a public network by encapsulation

Comment: *

Name: *

Email: *

Verification: *

An EDR solution reports that a suspicious process dropped a malicious file on endpoint DE23X5940P.
Sandbox analysis shows that the malware propagates through SMB and communicates through an encrypted command-and-control channel. A business-critical solution also depends on SMB. Which action should the security analyst take to respond to the incident and mitigate risk?

• A.Isolate the machine and block the command-and-control IP address.
• B.Disable SMB communications on all networks.
• C.Deploy an SSL-inspection solution and remove the malware.
• D.Reimage the machine and reset the user's credentials.

Comment: *

Name: *

Email: *

Verification: *