A Chief Information Security Officer (CISO) has determined through lessons learned and an associated after-action report that staff members who use legacy applications do not adequately understand how to differentiate between non-malicious emails and phishing emails. Which of the following should the CISO include in an action plan to remediate this issue?

• A.Awareness training and education
• B.Replacement of legacy applications
• C.Organizational governance
• D.Multifactor authentication on all systems

Comment: *

Name: *

Email: *

Verification: *

A report contains IoC and TTP information for a zero-day exploit that leverages vulnerabilities in a specific version of a web application. Which of the following actions should a SOC analyst take first after receiving the report?

• A.Implement a vulnerability scan to determine whether the environment is at risk.
• B.Block the IP addresses and domains from the report in the web proxy and firewalls.
• C.Verify whether the information is relevant to the organization.
• D.Analyze the web application logs to identify any suspicious or malicious activity.

Comment: *

Name: *

Email: *

Verification: *

A security analyst is reviewing the logs of a web server and notices that an attacker has attempted to exploit a SQL injection vulnerability. Which of the following tools can the analyst use to analyze the attack and prevent future attacks?

• A.A web application firewall
• B.A network intrusion detection system
• C.A vulnerability scanner
• D.A web proxy

Comment: *

Name: *

Email: *

Verification: *

A vulnerability scan of a web server that is exposed to the internet was recently completed. A security analyst is reviewing the resulting vector strings:
Vulnerability 1: CVSS: 3.0/AV:N/AC: L/PR: N/UI : N/S: U/C: H/I : L/A:L
Vulnerability 2: CVSS: 3.0/AV: L/AC: H/PR:N/UI : N/S: U/C: L/I : L/A: H Vulnerability 3: CVSS: 3.0/AV:A/AC: H/PR: L/UI : R/S: U/C: L/I : H/A:L Vulnerability 4: CVSS: 3.0/AV: P/AC: L/PR: H/UI : N/S: U/C: H/I:N/A:L Which of the following vulnerabilities should be patched first?

• A.Vulnerability 3
• B.Vulnerability 4
• C.Vulnerability 2
• D.Vulnerability 1

Comment: *

Name: *

Email: *

Verification: *

A team of analysts is developing a new internal system that correlates information from a variety of sources analyzes that information, and then triggers notifications according to company policy Which of the following technologies was deployed?

• A.SIEM
• B.SOAR
• C.IPS
• D.CERT

Comment: *

Name: *

Email: *

Verification: *