Which of the following data source can be used to detect the traffic associated with Bad Bot User-Agents?A . Windows Event LogB . Web Server LogsC . Router LogsD . Switch LogsView AnswerAnswer: B
Which of the following attacks causes sudden changes in file extensions or increase in file renames at rapid speed?A . Ransomware AttackB . DoS AttackC . DHCP starvation AttackD . File Injection AttackView AnswerAnswer:...
According to the forensics investigation process, what is the next step carried out right after collecting the evidence?A . Create a Chain of Custody DocumentB . Send it to the nearby police stationC ....
Which of the following factors determine the choice of SIEM architecture?A . SMTP ConfigurationB . DHCP ConfigurationC . DNS ConfigurationD . Network TopologyView AnswerAnswer: C
Which of the following formula is used to calculate the EPS of the organization?A . EPS = average number of correlated events /time in secondsB . EPS = number of normalized events /time in...
In which of the following incident handling and response stages, the root cause of the incident must be found from the forensic results?A . Evidence GatheringB . Evidence HandlingC . EradicationD . Systems RecoveryView...
Which of the following threat intelligence helps cyber security professionals such as security operations managers, network operations center and incident responders to understand how the adversaries are expected to perform the attack on the...
Which of the following Windows Event Id will help you monitors file sharing across the network?A . 7045B . 4625C . 5140D . 4624View AnswerAnswer: C Explanation: Reference: https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventID=5140
In which log collection mechanism, the system or application sends log records either on the local disk or over the network.A . rule-basedB . pull-basedC . push-basedD . signature-basedView AnswerAnswer: A
Shawn is a security manager working at Lee Inc Solution. His organization wants to develop threat intelligent strategy plan. As a part of threat intelligent strategy plan, he suggested various components, such as threat...
