QUESTION: 65

How is a SIEM tool used?

To collect security data from authentication failures and cyber attacks and forward it for analysis
To search and compare security data against acceptance standards and generate reports for analysis
To compare security alerts against configured scenarios and trigger system responses
To collect and analyze security data from network devices and servers and produce alerts

Answer(s): D

Reference:

https://www.varonis.com/blog/what-is-siem/

Reveal Solution Next Question

QUESTION: 66

Refer to the exhibit. An engineer is reverse engineering a suspicious file by examining its resources. What does this file indicate?

a DOS MZ executable format
a MS-DOS executable archive
an archived malware
a Windows executable file

Answer(s): D

Reference:

https://stackoverflow.com/questions/2577545/why-is-this-program-cannot-be-run-in-dos-mode-text- present-in-dll-files#:~:text=The%20linker%20places%20a%20default,using%20the%20%2FSTUB%20linker%20option.&text=This%20information%20enables%20Windows%20to,has%20an%20MS-DOS%20stub.

Reveal Solution Next Question

QUESTION: 67

Refer to the exhibit. An engineer is performing a static analysis on a malware and knows that it is capturing keys and webcam events on a company server. What is the indicator of compromise?

The malware is performing comprehensive fingerprinting of the host, including a processor, motherboard manufacturer, and connected removable storage.
The malware is a ransomware querying for installed anti-virus products and operating systems to encrypt and render unreadable until payment is made for file decryption.
The malware has moved to harvesting cookies and stored account information from major browsers and configuring a reverse proxy for intercepting network activity.
The malware contains an encryption and decryption routine to hide URLs/IP addresses and is storing the output of loggers and webcam captures in locally encrypted files for retrieval.

Answer(s): B

Reveal Solution Next Question

QUESTION: 68

An audit is assessing a small business that is selling automotive parts and diagnostic services. Due to increased customer demands, the company recently started to accept credit card payments and acquired a POS terminal. Which compliance regulations must the audit apply to the company?

HIPAA
FISMA
COBIT
PCI DSS

Answer(s): D

Reference:

https://upserve.com/restaurant-insider/restaurant-pos-pci-compliance-checklist/

Reveal Solution Next Question

Free 350-201 Exam Braindumps (page: 18)

QUESTION: 65

Reference:

QUESTION: 66

Reference:

QUESTION: 67

QUESTION: 68

Reference:

350-201 Discussions & Posts