An IT professional is reviewing the output from the top command in Linux. In this company, only IT and security staff are allowed to have elevated privileges. Both departments have confirmed they are not working on anything that requires elevated privileges. Based on the output below:
PID
USER
VIRT
RES
SHR
%CPU
%MEM
TIME+
COMMAND
34834
person
4980644
224288
111076
5.3
14.44
1:41.44
cinnamon
34218
person
51052
30920
23828
4.7
0.2
0:26.54
Xorg
2264
root
449628
143500
26372
14.0
3.1
0:12.38
bash
35963
xrdp
711940
42356
10560
2.0
0.2
0:06.81
xrdp
Which of the following PIDs is most likely to contribute to data exfiltration?

• A.2264
• B.34218
• C.34834
• D.35963

Comment: *

Name: *

Email: *

Verification: *

A SOC manager reviews metrics from the last four weeks to investigate a recurring availability issue. The manager finds similar events correlating to the times of the reported issues.
Which of the following methods would the manager most likely use to resolve the issue?

• A.Vulnerability assessment
• B.Root cause analysis
• C.Recurrence reports
• D.Lessons learned

Comment: *

Name: *

Email: *

Verification: *

A Chief Information Security Officer (CISO) wants to disable a functionality on a business-critical web application that is vulnerable to RCE in order to maintain the minimum risk level with minimal increased cost.
Which of the following risk treatments best describes what the CISO is looking for?

• A.Transfer
• B.Mitigate
• C.Avoid
• D.Accept

Comment: *

Name: *

Email: *

Verification: *

The SOC received a threat intelligence notification indicating that an employee's credentials were found on the dark web. The user's web and log-in activities were reviewed for malicious or anomalous connections, data uploads/downloads, and exploits. A review of the controls confirmed multifactor authentication was enabled. Which of the following should be done first to mitigate impact to the business networks and assets?

• A.Perform a forced password reset.
• B.Communicate the compromised credentials to the user.
• C.Perform an ad hoc AV scan on the user's laptop.
• D.Review and ensure privileges assigned to the user's account reflect least privilege.
• E.Lower the thresholds for SOC alerting of suspected malicious activity.

Comment: *

Name: *

Email: *

Verification: *

A security analyst needs to provide evidence of regular vulnerability scanning on the company's network for an auditing process. Which of the following is an example of a tool that can produce such evidence?

• A.OpenVAS
• B.Burp Suite
• C.Nmap
• D.Wireshark

Comment: *

Name: *

Email: *

Verification: *