A technician is analyzing output from a popular network mapping tool for a PCI audit:

Which of the following best describes the output?

• A.The host is not up or responding.
• B.The host is running excessive cipher suites.
• C.The host is allowing insecure cipher suites.
• D.The Secure Shell port on this host is closed

Comment: *

Name: *

Email: *

Verification: *

A disgruntled open-source developer has decided to sabotage a code repository with a logic bomb that will act as a wiper. Which of the following parts of the Cyber Kill Chain does this act exhibit?

• A.Reconnaissance
• B.Weaponization
• C.Exploitation
• D.Installation

Comment: *

Name: *

Email: *

Verification: *

A security analyst is reviewing events that occurred during a possible compromise. The analyst obtains the following log:

Which of the following is most likely occurring, based on the events in the log?

• A.An adversary is attempting to find the shortest path of compromise.
• B.An adversary is performing a vulnerability scan.
• C.An adversary is escalating privileges.
• D.An adversary is performing a password stuffing attack..

Comment: *

Name: *

Email: *

Verification: *

A SOC receives several alerts indicating user accounts are connecting to the company's identity provider through non-secure communications. User credentials for accessing sensitive, business-critical systems could be exposed. Which of the following logs should the SOC use when determining malicious intent?

• A.DNS
• B.tcpdump
• C.Directory
• D.IDS

Comment: *

Name: *

Email: *

Verification: *

While reviewing web server logs, a security analyst discovers the following suspicious line:

Which of the following is being attempted?

• A.Remote file inclusion
• B.Command injection
• C.Server-side request forgery
• D.Reverse shell

Comment: *

Name: *

Email: *

Verification: *