Which of the following is the best action to take after the conclusion of a security incident to improve incident response in the future?

• A.Develop a call tree to inform impacted users
• B.Schedule a review with all teams to discuss what occurred
• C.Create an executive summary to update company leadership
• D.Review regulatory compliance with public relations for official notification

Comment: *

Name: *

Email: *

Verification: *

A SOC analyst is analyzing traffic on a network and notices an unauthorized scan. Which of the following types of activities is being observed?

• A.Unauthorized peer-to-peer communication
• B.Rogue device on the network
• C.Potential precursor to an attack
• D.System updates

Comment: *

Name: *

Email: *

Verification: *

An analyst needs to provide recommendations based on a recent vulnerability scan:

Which of the following should the analyst recommend addressing to ensure potential vulnerabilities are identified?

• A.SMB use domain SID to enumerate users
• B.SYN scanner
• C.SSL certificate cannot be trusted
• D.Scan not performed with admin privileges

Comment: *

Name: *

Email: *

Verification: *

Several reports with sensitive information are being disclosed via file sharing services. The company would like to improve its security posture against this threat. Which of the following security controls would best support the company in this scenario?

• A.Implement step-up authentication for administrators.
• B.Improve employee training and awareness.
• C.Increase password complexity standards.
• D.Deploy mobile device management.

Comment: *

Name: *

Email: *

Verification: *

Which of the following best describes the reporting metric that should be utilized when measuring the degree to which a system, application, or user base is affected by an uptime availability outage?

• A.Timeline
• B.Evidence
• C.Impact
• D.Scope

Comment: *

Name: *

Email: *

Verification: *