After completing a review of network activity. the threat hunting team discovers a device on the network that sends an outbound email via a mail client to a non-company email address daily at 10:00 p.m. Which of the following is potentially occurring?

• A.Irregular peer-to-peer communication
• B.Rogue device on the network
• C.Abnormal OS process behavior
• D.Data exfiltration

Comment: *

Name: *

Email: *

Verification: *

A systems administrator is reviewing the output of a vulnerability scan.
INSTRUCTIONS
Review the information in each tab.
Based on the organization's environment architecture and remediation standards, select the server to be patched within 14 days and select the appropriate technique and mitigation.

Correct Answer:

see the explanation for step by step solution.
Explanation:
Step 1: Reviewing the Vulnerability Remediation Timeframes
The remediation standards require servers to be patched based on their CVSS score:
* CVSS > 9.0: Patch within 7 days
* CVSS 7.9 - 9.0: Patch within 14 days
* CVSS 5.0 - 7.9: Patch within 30 days
* CVSS 0 - 5.0: Patch within 60 days
Step 2: Analyzing the Output Tab
From the Output tab:
* Server 192.168.76.5 has a CVSS score of 9.2 for an unsupported Microsoft IIS version, indicating a critical vulnerability requiring a patch within 7 days.
* Server 192.168.76.6 has a CVSS score of 7.4 for a missing secure attribute on HTTPS cookies, which falls in the 5.0 - 7.9 range, requiring a patch within 30 days.
Since the question asks for the server to be patched within 14 days, we need to focus on servers with CVSS
7.9 - 9.0:
* None of the servers have a CVSS score that falls precisely in the 7.9 - 9.0 range.
* However, 192.168.76.5, with a CVSS score of 9.2, has a vulnerability that necessitates a quick response and fits as it must be patched within the shortest timeframe (7 days, which includes 14 days).
The server that fits within a 14-day urgency, based on standard practices, would be 192.168.76.5.
Step 3: Reviewing the Environment Tab
The Environment Tab provides additional context for 192.168.76.5:
* It's in the dev environment, which is internal and not publicly accessible.
* MFA is required, indicating security measures are already present.
Step 4: Selecting the Appropriate Technique and Mitigation
For 192.168.76.5, with the Microsoft IIS unsupported version:
* Patch; upgrade IIS to the current release is the most suitable option, as upgrading IIS will resolve the unsupported software vulnerability by bringing it up-to-date with supported versions.
* This technique addresses the root cause, which is the unpatched, outdated software.
Summary
* Server to be patched within 14 calendar days: 192.168.76.5
* Appropriate technique and mitigation: Patch; upgrade IIS to the current release This approach ensures that the most critical vulnerabilities are addressed promptly, maintaining security compliance.

Comment: *

Name: *

Email: *

Verification: *

An analyst reviews a recent government alert on new zero-day threats and finds the following CVE metrics for the most critical of the vulnerabilities:
CVSS: 3.1/AV:N/AC: L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:W/RC:R
Which of the following represents the exploit code maturity of this critical vulnerability?

• A.E:U
• B.S:C
• C.RC:R
• D.AV:N
• E.AC:L

Comment: *

Name: *

Email: *

Verification: *

A company is implementing a vulnerability management program and moving from an on-premises environment to a hybrid IaaS cloud environment. Which of the following implications should be considered on the new hybrid environment?

• A.The current scanners should be migrated to the cloud
• B.Cloud-specific misconfigurations may not be detected by the current scanners
• C.Existing vulnerability scanners cannot scan laaS systems
• D.Vulnerability scans on cloud environments should be performed from the cloud

Comment: *

Name: *

Email: *

Verification: *

Which of the following best explains the importance of the implementation of a secure software development life cycle in a company with an internal development team?

• A.Increases the product price by using the implementation as a piece of marketing
• B.Decreases the risks of the software usage and complies with regulatory requirements
• C.Improves the agile process and decreases the amount of tests before the final deployment
• D.Transfers the responsibility for security flaws to the vulnerability management team

Comment: *

Name: *

Email: *

Verification: *