A security analyst has set up a network tap to monitor network traffic for vulnerabilities. Which of the following techniques would BEST describe the approach the analyst has taken?

• A.Compliance scanning
• B.Credentialed scanning
• C.Passive vulnerability scanning
• D.Port scanning

Comment: *

Name: *

Email: *

Verification: *

Joe, an employee, asks a coworker how long ago Ann started working at the help desk. The coworker expresses surprise since nobody named Ann works at the help desk. Joe mentions that Ann called several people in the customer service department 10 help reset their passwords over the phone due to unspecified "server issues.' Which of the following has occurred?

• A.Social engineering
• B.Watering hols attack
• C.Password cracking
• D.Whaling

Comment: *

Name: *

Email: *

Verification: *

A user downloads and installs an MP3 converter, and runs the application. Upon running the application, the antivirus detects a new port in a listening state. Which of the following has the user MOST likely executed?

• A.Bot
• B.RAT
• C.Worm
• D.Ransomware

Comment: *

Name: *

Email: *

Verification: *

A technician has installed a new AAA server, which will be used by the network team to control access to a company's routers and switches. The technician completes the configuration by adding the network team members to the NETWORK_TEAM group, and then adding the NETWORK_TEAM group to the appropriate ALLOW_ACCESS access list. Only members of the network team should have access to the company's routers and switches.

Members of the network team successfully test their ability to log on to various network devices configured to use the AAA server. Weeks later, an auditor asks to review the following access log sample:

Which of the following should the auditor recommend based on the above information?

• A.Configure the ALLOW_ACCESS group logic to use AND rather than OR.
• B.Remove the DOMAIN_USERS group from ALLOW_ACCESS group.
• C.Disable groups nesting for the ALLOW_ACCESS group in the AAA server.
• D.Move the NETWORK_TEAM group to the top of the ALLOW_ACCESS access list.

Comment: *

Name: *

Email: *

Verification: *

An attack has occurred against a company.
INSTRUCTIONS
You have been tasked to do the following:
Identify the type of attack that is occurring on the network by clicking on the attacker's tablet and reviewing the output. (Answer Area 1) Identify which compensating controls should be implemented on the assets, in order to reduce the effectiveness of future attacks by dragging them to the correct server. (Answer area 2) All objects will be used, but not all placeholders may be filled. Objects may only be used once.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *