In which phase of Lockheed Martin's C Cyber Kill Chain Methodology, adversary creates a deliverable malicious payload using an exploit and a backdoor?A . ReconnaissanceB . DeliveryC . WeaponizationD . ExploitationView AnswerAnswer: B Explanation:...
What does the HTTP status codes 1XX represents?A . Informational messageB . Client errorC . SuccessD . RedirectionView AnswerAnswer: A
Which encoding replaces unusual ASCII characters with "%" followed by the character’s two-digit ASCII code expressed in hexadecimal?A . Unicode EncodingB . UTF EncodingC . Base64 EncodingD . URL EncodingView AnswerAnswer: D Explanation: Reference:...
What is the correct sequence of SOC Workflow?A . Collect, Ingest, Validate, Document, Report, RespondB . Collect, Ingest, Document, Validate, Report, RespondC . Collect, Respond, Validate, Ingest, Report, DocumentD . Collect, Ingest, Validate, Report,...
Which of the following attack can be eradicated by filtering improper XML syntax?A . CAPTCHA AttacksB . SQL Injection AttacksC . Insufficient Logging and Monitoring AttacksD . Web Services AttacksView AnswerAnswer: B
Emmanuel is working as a SOC analyst in a company named Tobey Tech. The manager of Tobey Tech recently recruited an Incident Response Team (IRT) for his company. In the process of collaboration with...
Jane, a security analyst, while analyzing IDS logs, detected an event matching Regex /((%3C)|<)((%69)|i|(% 49))((%6D)|m|(%4D))((%67)|g|(%47))[^n]+((%3E)|>)/|. What does this event log indicate?A . Directory Traversal AttackB . Parameter Tampering AttackC . XSS AttackD . SQL...
Where will you find the reputation IP database, if you want to monitor traffic from known bad IP reputation using OSSIM SIEM?A . /etc/ossim/reputationB . /etc/ossim/siem/server/reputation/dataC . /etc/siem/ossim/server/reputation.dataD . /etc/ossim/server/reputation.dataView AnswerAnswer: A
If the SIEM generates the following four alerts at the same time: I. Firewall blocking traffic from getting into the network alerts II. SQL injection attempt alerts III. Data deletion attempt alerts IV. Brute-force...
Which of the following tool can be used to filter web requests associated with the SQL Injection attack?A . NmapB . UrlScanC . ZAP proxyD . HydraView AnswerAnswer: B Explanation: Reference: https://aip.scitation.org/doi/pdf/10.1063/1.4982570
