QUESTION: 33

The incident response team was notified of detected malware. The team identified the infected hosts, removed the malware, restored the functionality and data of infected systems, and planned a company meeting to improve the incident handling capability. Which step was missed according to the NIST incident handling guide?

Contain the malware
Install IPS software
Determine the escalation path
Perform vulnerability assessment

Answer(s): D

Reveal Solution Next Question

QUESTION: 34

Refer to the exhibit. An engineer must tune the Cisco IOS device to mitigate an attack that is broadcasting a large number of ICMP packets. The attack is sending the victim’s spoofed source IP to a network using an IP broadcast address that causes devices in the network to respond back to the source IP address. Which action does the engineer recommend?

Use command ip verify reverse-path interface
Use global configuration command service tcp-keepalives-out
Use subinterface command no ip directed-broadcast
Use logging trap 6

Answer(s): A

Reference:

https://www.ccexpert.us/pix-firewall/ip-verify-reversepath-command.html

Reveal Solution Next Question

QUESTION: 35

Refer to the exhibit. An engineer is analyzing this Vlan0392-int12-239.pcap file in Wireshark after detecting a suspicious network activity. The origin header for the direct IP connections in the packets was initiated by a google chrome extension on a WebSocket protocol. The engineer checked message payloads to determine what information was being sent off-site but the payloads are obfuscated and unreadable. What does this STIX indicate?

The extension is not performing as intended because of restrictions since ports 80 and 443 should be accessible
The traffic is legitimate as the google chrome extension is reaching out to check for updates and fetches this information
There is a possible data leak because payloads should be encoded as UTF-8 text
There is a malware that is communicating via encrypted channels to the command and control server

Answer(s): C

Reveal Solution Next Question

QUESTION: 36

What do 2xx HTTP response codes indicate for REST APIs?

additional action must be taken by the client to complete the request
the server takes responsibility for error status codes
communication of transfer protocol-level information
successful acceptance of the client’s request

Answer(s): D

Reference:

https://restfulapi.net/http-status-codes/#:~:text=HTTP%20defines%20these%20standard%20status,results%20of%20a%20client%27s%20request.&text=2xx%3A%20Success%20–%20Indicates%20that%20the,order%20to%20complete%20their%20request.

Reveal Solution Next Question

Free 350-201 Exam Braindumps

QUESTION: 33

QUESTION: 34

Reference:

QUESTION: 35

QUESTION: 36

Reference:

350-201 Discussions & Posts