The Chief Information Security Officer is directing a new program to reduce attack surface risks and threats as part of a zero trust approach. The IT security team is required to come up with priorities for the program. Which of the following is the best priority based on common attack frameworks?

• A.Reduce the administrator and privileged access accounts
• B.Employ a network-based IDS
• C.Conduct thorough incident response
• D.Enable SSO to enterprise applications

Comment: *

Name: *

Email: *

Verification: *

Which of the following are process improvements that can be realized by implementing a SOAR solution? (Select two).

• A.Minimize security attacks
• B.Itemize tasks for approval
• C.Reduce repetitive tasks
• D.Minimize setup complexity
• E.Define a security strategy
• F.Generate reports and metrics

Comment: *

Name: *

Email: *

Verification: *

A security analyst noticed the following entry on a web server log:
Warning: fopen (http://127.0.0.1:16) : failed to open stream:
Connection refused in /hj/var/www/showimage.php on line 7
Which of the following malicious activities was most likely attempted?

• A.XSS
• B.CSRF
• C.SSRF
• D.RCE

Comment: *

Name: *

Email: *

Verification: *

An incident response team receives an alert to start an investigation of an internet outage. The outage is preventing all users in multiple locations from accessing external SaaS resources. The team determines the organization was impacted by a DDoS attack. Which of the following logs should the team review first?

• A.CDN
• B.Vulnerability scanner
• C.DNS
• D.Web server

Comment: *

Name: *

Email: *

Verification: *

Which of the following would help an analyst to quickly find out whether the IP address in a SIEM alert is a known-malicious IP address?

• A.Join an information sharing and analysis center specific to the company's industry.
• B.Upload threat intelligence to the IPS in STIX/TAXII format.
• C.Add data enrichment for IPS in the ingestion pipleline.
• D.Review threat feeds after viewing the SIEM alert.

Comment: *

Name: *

Email: *

Verification: *