An analyst investigated a website and produced the following:
Which of the following syntaxes did the analyst use to discover the application versions on this vulnerable website?

• A.nmap -o insecure.org
• B.nmap -A insecure.org
• C.nmap -sV -T4 -F insecure.org
• D.nmap -sS -T4 -F insecure.org

Comment: *

Name: *

Email: *

Verification: *

Which of the following best describes the key elements of a successful information security program?

• A.Business impact analysis, asset and change management, and security communication plan
• B.Security policy implementation, assignment of roles and responsibilities, and information asset classification
• C.Disaster recovery and business continuity planning, and the definition of access control requirements and human resource policies
• D.Senior management organizational structure, message distribution standards, and procedures for the operation of security management systems

Comment: *

Name: *

Email: *

Verification: *

An organization enabled a SIEM rule to send an alert to a security analyst distribution list when ten failed logins occur within one minute. However, the control was unable to detect an attack with nine failed logins.
Which of the following best represents what occurred?

• A.False positive
• B.True negative
• C.False negative
• D.True positive

Comment: *

Name: *

Email: *

Verification: *

A security analyst is responding to an indent that involves a malicious attack on a network. Data closet.
Which of the following best explains how are analyst should properly document the incident?

• A.Back up the configuration file for alt network devices
• B.Record and validate each connection
• C.Create a full diagram of the network infrastructure
• D.Take photos of the impacted items

Comment: *

Name: *

Email: *

Verification: *

An analyst is investigating a phishing incident and has retrieved the following as part of the investigation:
cmd.exe /c c:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -WindowStyle Hidden -ExecutionPolicy Bypass -NoLogo -NoProfile -EncodedCommand <VERY LONG STRING> Which of the following should the analyst use to gather more information about the purpose of this command?

• A.Echo the command payload content into 'base64 -d'.
• B.Execute the command from a Windows VM.
• C.Use a command console with administrator privileges to execute the code.
• D.Run the command as an unprivileged user from the analyst workstation.

Comment: *

Name: *

Email: *

Verification: *