A network service on a production system keeps crashing at random times. The systems administrator suspects a bug in the listener is causing the service to crash, resuming in the a DoS. Which the service crashes, a core dump is left in the /tmp directory. Which of the following tools can the systems administrator use to reproduction these symptoms?

• A.Debugger
• B.Vulnerability scanner
• C.Core dump analyzer
• D.Fuzzer

Comment: *

Name: *

Email: *

Verification: *

A security analyst is attempting to break into a client's secure network. The analyst was not given prior information about the client, except for a block of public IP addresses that are currently in use. After network enumeration, the analyst's NEXT step is to perform:

• A.a gray-box penetration test
• B.a risk analysis
• C.a vulnerability assessment
• D.a red team exercise
• E.an external security audit

Comment: *

Name: *

Email: *

Verification: *

A Chief Information Security Officer (CISO) needs to establish a KRI for a particular system. The system holds archives of contracts that are no longer in use. The contracts contain intellectual property and have a data classification of non-public. Which of the following be the BEST risk indicator for this system?

• A.Percent of patches applied in the past 30 days
• B.Number of accounts accessing the system per day
• C.Count of login failures per week
• D.Average minutes of downtime per quarter

Comment: *

Name: *

Email: *

Verification: *

A cybersecurity engineer analyst a system for vulnerabilities. The tool created an OVAL. Results document as output. Which of the following would enable the engineer to interpret the results in a human readable form? (Select TWO.)

• A.OOXML editor
• B.Event Viewer
• C.Debugging utility
• D.SCAP tool
• E.XML style sheet
• F.Text editor

Comment: *

Name: *

Email: *

Verification: *

A company is outsourcing to an MSSP that performs managed detection and response services. The MSSP requires a server to be placed inside the network as a log aggregate and allows remote access to MSSP analyst. Critical devices send logs to the log aggregator, where data is stored for 12 months locally before being archived to a multitenant cloud. The data is then sent from the log aggregate to a public IP address in the MSSP datacenter for analysis.
A security engineer is concerned about the security of the solution and notes the following.
* The critical devise send cleartext logs to the aggregator.
* The log aggregator utilize full disk encryption.
* The log aggregator sends to the analysis server via port 80.
* MSSP analysis utilize an SSL VPN with MFA to access the log aggregator remotely.
* The data is compressed and encrypted prior to being achieved in the cloud.
Which of the following should be the engineer's GREATEST concern?

• A.Hardware vulnerabilities introduced by the log aggregate server
• B.Encryption of data in transit
• C.Multinancy and data remnants in the cloud
• D.Network bridging from a remote access VPN

Comment: *

Name: *

Email: *

Verification: *