A security analyst reviews the following results of a Nikto scan:

Which of the following should the security administrator investigate next?

• A.tiki
• B.phpList
• C.shtml.exe
• D.sshome

Comment: *

Name: *

Email: *

Verification: *

An analyst is examining events in multiple systems but is having difficulty correlating data points. Which of the following is most likely the issue with the system?

• A.Access rights
• B.Network segmentation
• C.Time synchronization
• D.Invalid playbook

Comment: *

Name: *

Email: *

Verification: *

An incident responder was able to recover a binary file through the network traffic. The binary file was also found in some machines with anomalous behavior. Which of the following processes most likely can be performed to understand the purpose of the binary file?

• A.File debugging
• B.Traffic analysis
• C.Reverse engineering
• D.Machine isolation

Comment: *

Name: *

Email: *

Verification: *

A vulnerability analyst received a list of system vulnerabilities and needs to evaluate the relevant impact of the exploits on the business. Given the constraints of the current sprint, only three can be remediated. Which of the following represents the least impactful risk, given the CVSS3.1 base scores?

• A.AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L - Base Score 6.0
• B.AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:L - Base Score 7.2
• C.AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H - Base Score 6.4
• D.AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L - Base Score 6.5

Comment: *

Name: *

Email: *

Verification: *

A security analyst is trying to detect connections to a suspicious IP address by collecting the packet captures from the gateway. Which of the following commands should the security analyst consider running?

• A.grep [IP address] packets.pcapB cat packets.pcap | grep [IP Address]
• B.tcpdump -n -r packets.pcap host [IP address]
• C.strings packets.pcap | grep [IP Address]

Comment: *

Name: *

Email: *

Verification: *