Jason, a SOC Analyst with Maximus Tech, was investigating Cisco ASA Firewall logs and came across the following log entry:
May 06 2018 21:27:27 asa 1: %ASA -5 - 11008: User 'enable_15' executed the 'configure term' command What does the security level in the above log indicates?

• A.Normal but significant message
• B.Informational message
• C.Critical condition message
• D.Warning condition message

Comment: *

Name: *

Email: *

Verification: *

Which of the following are the responsibilities of SIEM Agents?
1.Collecting data received from various devices sending data to SIEM before forwarding it to the central engine.
2.Normalizing data received from various devices sending data to SIEM before forwarding it to the central engine.
3.Co-relating data received from various devices sending data to SIEM before forwarding it to the central engine.
4.Visualizing data received from various devices sending data to SIEM before forwarding it to the central engine.

• A.3 and 1
• B.1 and 4
• C.1 and 2
• D.2 and 3

Comment: *

Name: *

Email: *

Verification: *

Daniel is a member of an IRT, which was started recently in a company named Mesh Tech. He wanted to find the purpose and scope of the planned incident response capabilities.
What is he looking for?

• A.Incident Response Mission
• B.Incident Response Resources
• C.Incident Response Vision
• D.Incident Response Intelligence

Comment: *

Name: *

Email: *

Verification: *

Identify the attack when an attacker by several trial and error can read the contents of a password file present in the restricted etc folder just by manipulating the URL in the browser as shown:
http://www.terabytes.com/process.php./../../../../etc/passwd

• A.Form Tampering Attack
• B.Directory Traversal Attack
• C.Denial-of-Service Attack
• D.SQL Injection Attack

Comment: *

Name: *

Email: *

Verification: *

Which of the following Windows Event Id will help you monitors file sharing across the network?

• A.4625
• B.5140
• C.4624
• D.7045

Comment: *

Name: *

Email: *

Verification: *