A user downloads software that contains malware onto a computer that eventually infects numerous other systems. Which of the following has the user become?

• A.Hacklivist
• B.Advanced persistent threat
• C.Insider threat
• D.Script kiddie

Comment: *

Name: *

Email: *

Verification: *

A security analyst received a malicious binary file to analyze. Which of the following is the best technique to perform the analysis?

• A.Code analysis
• B.Static analysis
• C.Reverse engineering
• D.Fuzzing

Comment: *

Name: *

Email: *

Verification: *

Several incidents have occurred with a legacy web application that has had little development work completed. Which of the following is the most likely cause of the incidents?

• A.Misconfigured web application firewall
• B.Data integrity failure
• C.Outdated libraries
• D.Insufficient logging

Comment: *

Name: *

Email: *

Verification: *

An incident response team is working with law enforcement to investigate an active web server compromise.
The decision has been made to keep the server running and to implement compensating controls for a period of time. The web service must be accessible from the internet via the reverse proxy and must connect to a database server. Which of the following compensating controls will help contain the adversary while meeting the other requirements? (Select two).

• A.Drop the tables on the database server to prevent data exfiltration.
• B.Deploy EDR on the web server and the database server to reduce the adversaries capabilities.
• C.Stop the httpd service on the web server so that the adversary can not use web exploits
• D.use micro segmentation to restrict connectivity to/from the web and database servers.
• E.Comment out the HTTP account in the / etc/passwd file of the web server
• F.Move the database from the database server to the web server.

Comment: *

Name: *

Email: *

Verification: *

An analyst is suddenly unable to enrich data from the firewall. However, the other open intelligence feeds continue to work. Which of the following is the most likely reason the firewall feed stopped working?

• A.The firewall service account was locked out.
• B.The firewall was using a paid feed.
• C.The firewall certificate expired.
• D.The firewall failed open.

Comment: *

Name: *

Email: *

Verification: *