A security analyst recently joined the team and is trying to determine which scripting language is being used in a production script to determine if it is malicious. Given the following script:

Which of the following scripting languages was used in the script?

• A.PowerShel
• B.Ruby
• C.Python
• D.Shell script

Comment: *

Name: *

Email: *

Verification: *

While performing a dynamic analysis of a malicious file, a security analyst notices the memory address changes every time the process runs. Which of the following controls is most likely preventing the analyst from finding the proper memory address of the piece of malicious code?

• A.Address space layout randomization
• B.Data execution prevention
• C.Stack canary
• D.Code obfuscation

Comment: *

Name: *

Email: *

Verification: *

An analyst is remediating items associated with a recent incident. The analyst has isolated the vulnerability and is actively removing it from the system. Which of the following steps of the process does this describe?

• A.Eradication
• B.Recovery
• C.Containment
• D.Preparation

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the best reason to implement an MOU?

• A.To create a business process for configuration management
• B.To allow internal departments to understand security responsibilities
• C.To allow an expectation process to be defined for legacy systems
• D.To ensure that all metrics on service levels are properly reported

Comment: *

Name: *

Email: *

Verification: *

Which of the following security operations tasks are ideal for automation?

• A.Suspicious file analysis:
• B.Firewall IoC block actions:
  Examine the firewall logs for IoCs from the most recently published zero-day exploit Take mitigating actions in the firewall to block the behavior found in the logs Follow up on any false positives that were caused by the block rules
• C.Security application user errors:
  Search the error logs for signs of users having trouble with the security application Look up the user's phone number Call the user to help with any questions about using the application
• D.Email header analysis:
  Check the email header for a phishing confidence metric greater than or equal to five Add the domain of sender to the block list Move the email to quarantine

Comment: *

Name: *

Email: *

Verification: *