A vulnerability scan has returned the following information:

Which of the following describes the meaning of these results?

• A.Trend Micro has a known exploit that must be resolved or patched.
• B.Connecting to the host using a null session allows enumeration of share names.
• C.There is an unknown bug in a Lotus server with no Bugtraq ID.
• D.No CVE is present, so it is a false positive caused by Lotus running on a Windows server.

Comment: *

Name: *

Email: *

Verification: *

An analyst has noticed unusual activities in the SIEM to a .cn domain name. Which of the following should the analyst use to identify the content of the traffic?

• A.Packet capture
• B.DNS harvesting
• C.Service discovery
• D.Log review

Comment: *

Name: *

Email: *

Verification: *

The developers recently deployed new code to three web servers. A daily automated external device scan report shows server vulnerabilities that are failing items according to PCI DSS. If the vulnerability is not valid, the analyst must take the proper steps to get the scan clean. If the vulnerability is valid, the analyst must remediate the finding. After reviewing the given information, select the STEP 2 tab in order to complete the simulation by selecting the correct "Validation Result" AND "Remediation Action" for each server listed using the drop down options.
Instructions:
If at any time you would like to bring back the initial state of the simulation, please select the Reset button.
When you have completed the simulation, please select the Done button to submit.
Once the simulation is submitted, please select the Next button to continue.

Comment: *

Name: *

Email: *

Verification: *

A retail corporation with widely distributed store locations and IP space must meet PCI requirements relating to vulnerability scanning. The organization plans to outsource this function to a third party to reduce costs.
Which of the following should be used to communicate expectations related to the execution of scans?

• A.MOU
• B.SLA
• C.Lessons learned documentation
• D.Vulnerability assessment report

Comment: *

Name: *

Email: *

Verification: *

After completing a vulnerability scan, the following output was noted:

Which of the following vulnerabilities has been identified?

• A.VPN tunnel vulnerability.
• B.PKI transfer vulnerability.
• C.Active Directory encryption vulnerability.
• D.Web application cryptography vulnerability.

Comment: *

Name: *

Email: *

Verification: *