A security analyst captures forensic evidence from a potentially compromised system for further investigation. The evidence is documented and securely stored to FIRST:

• A.obtain a legal hold.
• B.maintain the chain of custody.
• C.preserve the data.
• D.recover data at a later time.

Comment: *

Name: *

Email: *

Verification: *

An attack has occurred against a company.
INSTRUCTIONS
You have been tasked to do the following:
Identify the type of attack that is occurring on the network by clicking on the attacker's tablet and reviewing the output. (Answer Area 1) Identify which compensating controls should be implemented on the assets, in order to reduce the effectiveness of future attacks by dragging them to the correct server. (Answer area 2) All objects will be used, but not all placeholders may be filled. Objects may only be used once.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

A user receives an email from ISP indicating malicious traffic coming from the user's home network is detected. The traffic appears to be Linux-based, and it is targeting a website that was recently featured on the news as being taken offline by an Internet attack. The only Linux device on the network is a home surveillance camera system.
Which of the following BEST describes what is happening?

• A.The camera system is infected with a bot.
• B.The camera system is infected with a Trojan.
• C.The camera system is infected with a RAT.
• D.The camera system is infected with a backdoor.

Comment: *

Name: *

Email: *

Verification: *

A security consultant discovers that an organization is using the PCL protocol to print documents, utilizing the default driver and print settings. Which of the following is the
MOST likely risk in this situation?

• A.Attackers can use the PCL protocol to bypass the firewall of client computers.
• B.An attacker can easily inject malicious code into the printer firmware.
• C.An attacker can access and change the printer configuration.
• D.SNMP data leaving the printer will not be properly encrypted.
• E.An MITM attack can reveal sensitive information.

Comment: *

Name: *

Email: *

Verification: *

A security administrator plans to conduct a vulnerability scan on the network to determine if system applications are up to date. The administrator wants to limit disruptions to operations but not consume too many resources. Which of the following types of vulnerability scans should be conducted?

• A.Port
• B.Credentialed
• C.SYN
• D.Non-Intrusive

Comment: *

Name: *

Email: *

Verification: *