QUESTION: 5

Refer to the exhibit. Cisco Advanced Malware Protection installed on an end-user desktop has automatically submitted a low prevalence file to the Threat Grid analysis engine for further analysis. What should be concluded from this report?

The prioritized behavioral indicators of compromise do not justify the execution of the “ransomware” because the scores do not indicate the likelihood of malicious ransomware.
The prioritized behavioral indicators of compromise do not justify the execution of the “ransomware” because the scores are high and do not indicate the likelihood of malicious ransomware.
The prioritized behavioral indicators of compromise justify the execution of the “ransomware” because the scores are high and indicate the likelihood that malicious ransomware has been detected.
The prioritized behavioral indicators of compromise justify the execution of the “ransomware” because the scores are low and indicate the likelihood that malicious ransomware has been detected.

Answer(s): C

Reveal Solution Next Question

QUESTION: 6

The physical security department received a report that an unauthorized person followed an authorized individual to enter a secured premise. The incident was documented and given to a security specialist to analyze. Which step should be taken at this stage?

Determine the assets to which the attacker has access
Identify assets the attacker handled or acquired
Change access controls to high risk assets in the enterprise
Identify movement of the attacker in the enterprise

Answer(s): D

Reveal Solution Next Question

QUESTION: 7

A new malware variant is discovered hidden in pirated software that is distributed on the Internet. Executives have asked for an organizational risk assessment. The security officer is given a list of all assets. According to NIST, which two elements are missing to calculate the risk assessment? (Choose two.)

incident response playbooks
asset vulnerability assessment
report of staff members with asset relations
key assets and executives
malware analysis report

Answer(s): B,E

Reference:

https://cloudogre.com/risk-assessment/

Reveal Solution Next Question

QUESTION: 8

Refer to the exhibit. At which stage of the threat kill chain is an attacker, based on these URIs of inbound web requests from known malicious Internet scanners?

exploitation
actions on objectives
delivery
reconnaissance

Answer(s): C

Reference:

https://www2.deloitte.com/content/dam/Deloitte/sg/Documents/risk/sea-risk-cyber-101-july2017.pdf

Reveal Solution Next Question

Free 350-201 Exam Braindumps (page: 3)

QUESTION: 5

QUESTION: 6

QUESTION: 7

Reference:

QUESTION: 8

Reference:

350-201 Discussions & Posts