Which of the following is the appropriate phase in the incident response process to perform a vulnerability scan to determine the effectiveness of corrective actions?

• A.Lessons learned
• B.Reporting
• C.Recovery
• D.Root cause analysis

Comment: *

Name: *

Email: *

Verification: *

Which of the following will most likely cause severe issues with authentication and logging?

• A.Virtualization
• B.Multifactor authentication
• C.Federation
• D.Time synchronization

Comment: *

Name: *

Email: *

Verification: *

A security analyst is writing a shell script to identify IP addresses from the same country. Which of the following functions would help the analyst achieve the objective?

• A.function w() { info=$(ping -c 1 $1 | awk -F "/" 'END{print $1}') && echo "$1 | $info" }
• B.function x() { info=$(geoiplookup $1) && echo "$1 | $info" }
• C.function y() { info=$(dig -x $1 | grep PTR | tail -n 1 ) && echo "$1 | $info" }
• D.function z() { info=$(traceroute -m 40 $1 | awk 'END{print $1}') && echo "$1 | $info" }

Comment: *

Name: *

Email: *

Verification: *

A security analyst is reviewing events that occurred during a possible compromise. The analyst obtains the following log:

Which of the following is most likely occurring, based on the events in the log?

• A.An adversary is attempting to find the shortest path of compromise.
• B.An adversary is performing a vulnerability scan.
• C.An adversary is escalating privileges.
• D.An adversary is performing a password stuffing attack.

Comment: *

Name: *

Email: *

Verification: *

A SOC analyst identifies the following content while examining the output of a debugger command over a client-server application:
getconnection (database01, "alpha " , "AXTV. 127GdCx94GTd") ;
Which of the following is the most likely vulnerability in this system?

• A.Lack of input validation
• B.SQL injection
• C.Hard-coded credential
• D.Buffer overflow attacks

Comment: *

Name: *

Email: *

Verification: *