A company is implementing SSL inspection. During the next six months, multiple web applications that will be separated out with subdomains will be deployed.
Which of the following will allow the inspection of the data without multiple certificate deployments?

• A.Use a third-party C
• B.Implement certificate pinning.
• C.Create a wildcard certificate.
• D.Include all available cipher suites.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a benefit of using steganalysis techniques in forensic response?

• A.Identifying least significant bit encoding of data in a .wav file
• B.Maintaining chain of custody for acquired evidence
• C.Breaking a symmetric cipher used in secure voice communications
• D.Determining the frequency of unique attacks against DRM-protected media

Comment: *

Name: *

Email: *

Verification: *

A SOC analyst is reviewing malicious activity on an external, exposed web server. During the investigation, the analyst determines specific traffic is not being logged, and there is no visibility from the WAF for the web application.
Which of the following is the MOST likely cause?

• A.HTTP traffic is not forwarding to HTTPS to decrypt.
• B.Old, vulnerable cipher suites are still being used.
• C.A certificate on the WAF is expired.
• D.The user agent client is not compatible with the WAF.

Comment: *

Name: *

Email: *

Verification: *

A user from the sales department opened a suspicious file attachment. The sales department then contacted the SOC to investigate a number of unresponsive systems, and the team successfully identified the file and the origin of the attack.
Which of the following is the NEXT step of the incident response plan?

• A.Response
• B.Remediation
• C.Containment
• D.Recovery

Comment: *

Name: *

Email: *

Verification: *

A technician is reviewing the logs and notices a large number of files were transferred to remote sites over the course of three months. This activity then stopped. The files were transferred via TLS-protected HTTP sessions from systems that do not send traffic to those sites.
The technician will define this threat as:

• A.an advanced persistent threat.
• B.a decrypting RSA using obsolete and weakened encryption attack.
• C.a zero-day attack.
• D.an on-path attack.

Comment: *

Name: *

Email: *

Verification: *