A Chief Information Security Officer has outlined several requirements for a new vulnerability scanning project:
. Must use minimal network bandwidth
. Must use minimal host resources
. Must provide accurate, near real-time updates
. Must not have any stored credentials in configuration on the scanner
Which of the following vulnerability scanning methods should be used to best meet these requirements?

• A.Internal
• B.Agent
• C.Active
• D.Uncredentialed

Comment: *

Name: *

Email: *

Verification: *

A security analyst observed the following activity from a privileged account:
. Accessing emails and sensitive information
. Audit logs being modified
. Abnormal log-in times
Which of the following best describes the observed activity?

• A.Irregular peer-to-peer communication
• B.Unauthorized privileges
• C.Rogue devices on the network
• D.Insider attack

Comment: *

Name: *

Email: *

Verification: *

During a training exercise, a security analyst must determine the vulnerabilities to prioritize. The analyst reviews the following vulnerability scan output:

Which of the following issues should the analyst address first?

• A.Allows anonymous read access to /etc/passwd
• B.Allows anonymous read access via any FTP connection
• C.Microsoft Defender security definition updates disabled
• D.less command allows for escape exploit via terminal

Comment: *

Name: *

Email: *

Verification: *

A cybersecurity team lead is developing metrics to present in the weekly executive briefs. Executives are interested in knowing how long it takes to stop the spread of malware that enters the network.
Which of the following metrics should the team lead include in the briefs?

• A.Mean time between failures
• B.Mean time to detect
• C.Mean time to remediate
• D.Mean time to contain

Comment: *

Name: *

Email: *

Verification: *

Which of the following attributes is part of the Diamond Model of Intrusion Analysis?

• A.Delivery
• B.Weaponization
• C.Command and control
• D.Capability

Comment: *

Name: *

Email: *

Verification: *