AXSS vulnerability was reported on one of the non-sensitive/non-mission-critical public websites of a company. The security department confirmed the finding and needs to provide a recommendation to the application owner. Which of the following recommendations will best prevent this vulnerability from being exploited? (Select two).

• A.Implement an IPS in front of the web server.
• B.Enable MFA on the website.
• C.Take the website offline until it is patched.
• D.Implement a compensating control in the source code.
• E.Configure TLS v1.3 on the website.
• F.Fix the vulnerability using a virtual patch at the WAF.

Comment: *

Name: *

Email: *

Verification: *

A company's user accounts have been compromised. Users are also reporting that the company's internal portal is sometimes only accessible through HTTP, other times; it is accessible through HTTPS. Which of the following most likely describes the observed activity?

• A.There is an issue with the SSL certificate causinq port 443 to become unavailable for HTTPS access
• B.An on-path attack is being performed by someone with internal access that forces users into port 80
• C.The web server cannot handle an increasing amount of HTTPS requests so it forwards users to port 80
• D.An error was caused by BGP due to new rules applied over the company's internal routers

Comment: *

Name: *

Email: *

Verification: *

An organization's email account was compromised by a bad actor. Given the following Information:
Which of the following is the length of time the team took to detect the threat?

• A.25 minutes
• B.40 minutes
• C.45 minutes
• D.2 hours

Comment: *

Name: *

Email: *

Verification: *

During the log analysis phase, the following suspicious command is detected-

Which of the following is being attempted?

• A.Buffer overflow
• B.RCE
• C.ICMP tunneling
• D.Smurf attack

Comment: *

Name: *

Email: *

Verification: *

A SOC manager is establishing a reporting process to manage vulnerabilities. Which of the following would be the best solution to identify potential loss incurred by an issue?

• A.Trends
• B.Risk score
• C.Mitigation
• D.Prioritization

Comment: *

Name: *

Email: *

Verification: *