QUESTION: 37

An engineer received an alert of a zero-day vulnerability affecting desktop phones through which an attacker sends a crafted packet to a device, resets the credentials, makes the device unavailable, and allows a default administrator account login. Which step should an engineer take after receiving this alert?

Initiate a triage meeting to acknowledge the vulnerability and its potential impact
Determine company usage of the affected products
Search for a patch to install from the vendor
Implement restrictions within the VoIP VLANS

Answer(s): C

Reveal Solution Next Question

QUESTION: 38

Refer to the exhibit. Which code snippet will parse the response to identify the status of the domain as malicious, clean or undefined?

Answer(s): C

Reveal Solution Next Question

QUESTION: 39

An engineer receives an incident ticket with hundreds of intrusion alerts that require investigation. An analysis of the incident log shows that the alerts are from trusted IP addresses and internal devices. The final incident report stated that these alerts were false positives and that no intrusions were detected. What action should be taken to harden the network?

Move the IPS to after the firewall facing the internal network
Move the IPS to before the firewall facing the outside network
Configure the proxy service on the IPS
Configure reverse port forwarding on the IPS

Answer(s): C

Reveal Solution Next Question

QUESTION: 40

A SOC team is informed that a UK-based user will be traveling between three countries over the next 60 days. Having the names of the 3 destination countries and the user's working hours, what must the analyst do next to detect an abnormal behavior?

Create a rule triggered by 3 failed VPN connection attempts in an 8-hour period
Create a rule triggered by 1 successful VPN connection from any nondestination country
Create a rule triggered by multiple successful VPN connections from the destination countries
Analyze the logs from all countries related to this user during the traveling period

Answer(s): D

Reveal Solution Next Question

Free 350-201 Exam Braindumps (page: 11)

QUESTION: 37

QUESTION: 38

QUESTION: 39

QUESTION: 40

350-201 Discussions & Posts