Which CVSSv3 Attack Vector metric value requires the attacker to physically touch or manipulate the vulnerable component?A . localB . physicalC . networkD . adjacentView AnswerAnswer: B
A CMS plugin creates two files that are accessible from the Internet myplugin.html and exploitable.php. A newly discovered exploit takes advantage of an injection vulnerability in exploitable.php. To exploit the vulnerability, one must send...
The united State CERT provides cybersecurity protection to Federal, civilian, and executive branch agencies through intrusion detection and prevention capabilities. Which type of incident response team is this an example of?A . Federal PSIRTB...
Which information must be left out of a final incident report?A . server hardware configurationsB . exploit or vulnerability usedC . impact and/or the financial lossD . how the incident was detectedView AnswerAnswer: A
Which type of analysis allows you to see how likely an exploit could affect your network?A . descriptiveB . casualC . probabilisticD . inferentialView AnswerAnswer: C
Drag and Drop Question Drag and drop the elements of incident handling from the left into the correct order on the right. View AnswerAnswer:
Which of the following is one of the main goals of data normalization?A . To save duplicate logs for redundancyB . To purge redundant data while maintaining data integrityC . To correlate IPS and...
Which regular expression matches "color" and "colour"?A . col[0-9]+ourB . colo?urC . colou?rD . [a-z]{7}View AnswerAnswer: C
Which of the following is one of the main goals of the CSIRT?A . To configure the organization's firewallsB . To monitor the organization's IPS devicesC . To minimize and control the damage associated...
Which option allows a file to be extracted from a TCP stream within Wireshark?A . File > Export ObjectsB . Analyze > ExtractC . Tools > Export > TCPD . View > ExtractView AnswerAnswer:...
